CVE-2025-12563

Name of the Vulnerable Software and Affected Versions Blog2Social: Social Media Auto Post & Scheduler plugin for WordPress versions up to and including 8.6.0

Description The Blog2Social: Social Media Auto Post & Scheduler plugin for WordPress has a flaw related to file uploads. An incorrect capability check within the uploadVideo() function allows authenticated attackers with Subscriber-level access or higher to upload mp4 files to the 'wp-content/uploads///' directory.

Recommendations Update Blog2Social: Social Media Auto Post & Scheduler plugin for WordPress to a version later than 8.6.0.