CVE-2026-108092Published
Social Media Auto Post & Scheduler <= 9.1.4 - Authenticated (Contributor+) Insecure Direct Object Reference to Sensitive Information Exposure
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-108092 · Microsoft / collected KEV context
cve-program · CVE-2026-108092
- https://www.wordfence.com/threat-intel/vulnerabilities/id/b394ee3e-fc1c-40b5-b3c5-a9b5e44a7a14?source=cve
- https://plugins.trac.wordpress.org/browser/blog2social/tags/9.1.4/includes/Ajax/Get.php#L275
- https://plugins.trac.wordpress.org/browser/blog2social/tags/9.1.4/includes/Ajax/Get.php#L622
- https://plugins.trac.wordpress.org/browser/blog2social/tags/9.1.4/includes/Ajax/Get.php#L253
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.