Sensitive Information Exposure Vulnerability in Blog2Social Plugin by WordPress

CVE-2025-14943

What is CVE-2025-14943?

The Blog2Social: Social Media Auto Post & Scheduler plugin for WordPress is susceptible to a Sensitive Information Exposure vulnerability due to improper authorization checks within the 'getShipItemFullText' function. This flaw allows authenticated users, with Subscriber-level access or higher, to potentially extract confidential data from password-protected, private, or draft posts. The vulnerability arises because the system only verifies that the user has the minimum 'read' capability and a valid nonce, without validating access rights to the individual posts being retrieved. As a result, attackers could exploit this weakness to gain unauthorized access to sensitive content.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References