Plugin Pulse
← Pulse

Blog2Social: Social Media Auto Post & Scheduler

by Adenion · Social

Also makes 1 other plugin · 50.0K+ installs across the portfolio →

Free audit wp.org ↗

Automatically share and schedule your WordPress content on top social platforms like Facebook, Instagram, LinkedIn, TikTok, and more.

M WP Mayor reviewed this plugin Blog2Social Review: Easily Share WordPress Content on Social Media Read review ↗
How scoring works →
89 Health · A
Maintenance 100/100
Rating quality 89/100
Support 70/100

89 health vs 55 average across 1,135 Social plugins

50K+

Active installs

≈59K estimated

5.1M

Total downloads

since 2014

4.52★

Rating (adjusted)

4.5★ raw · 2097 reviews · +0.5/wk

-38%

36.8K

Downloads · 30d

category median +17%

Directory ranking optimization

How it's scored →

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

98 / 100

Excellent listing optimization

Well tuned across the board

Update recency 100/100
WP compatibility 100/100
Rating quality 90/100
Listing tuning 100/100
Support resolution 100/100

Daily downloads

Since 2022-10-05 · 1,421 days · wp.org + Plugin Pulse archive

-38% vs prior 30d
1.1KDownloads · Aug 26

30-day downloads

Rolling 30-day volume · peaks are release surges

36.8K

now · peak 151.9K

37K30d downloads · Aug 26

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

Blog2Social: Social · #779 you Bit Social · #2865 Social Media Auto Po · #2555 Social Media Auto Po · #13070

Rating trend

Star average over time · dips mark rough releases

4.5Stars · Aug 26

Update activity

How busy the existing users are, measured as downloads in the last 30 days for every 1,000 active sites. A spike means a new release everyone's pulling; a long, slow decline means an aging user base that updates less.

739per 1k installs · Aug 26

Release cadence

Actively maintained
from wp.org release tags

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

20

releases in the last 12 months

2mo ago

latest release · v9.0.1

120

tagged releases on record

Recent releases

9.0.1 · 2mo ago9.0.0 · 2mo ago8.9.3 · 3mo ago8.9.2 · 3mo ago8.9.1 · 3mo ago8.9.0 · 4mo ago8.8.5 · 5mo ago8.8.4 · 5mo ago8.8.3 · 5mo ago8.8.2 · 6mo ago8.8.1 · 6mo ago8.8.0 · 6mo ago8.7.5 · 6mo ago8.7.4 · 7mo ago

What its installed base runs

via wordpress.org

Share of active installs on each version of this plugin · 46% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

v9.0 46%
v8.9 10%
v6.0 8.2%
v8.7 7.1%
Older / other versions 28%

Estimated active installs

The public count shows “50K+”. Our estimate pins where the real number sits.

tracked estimate
50K–60K ≈59K

Refined from the date this plugin crossed into its current band.

Install history · since 2015-03-10 · 1,489 observations

50KInstalls · Aug 26

Estimated value

What this plugin might earn a year, and what it might sell for. Modeled from public signals; we don't see anyone's books.

Est. annual revenue

N/A

Est. acquisition value

N/A

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. A declining trend compresses what a buyer would pay.

Ratings · 2097 reviews

Read on wp.org ↗
5★
1719 4★
124 3★
41 2★
50 1★
163

Details

Version
9.0.3
Last updated
5d ago
Added
2014-11-11 · 11 yrs old
Requires WP
6.2
Tested up to
7.1
Requires PHP
7.4
Changelog ↗Support forum ↗Reviews ↗Advanced stats ↗

Latest updates

via wp.org changelog

Recent releases and news for this plugin

  1. — Version 9.0.2 Usability Optimization 9.0.2
  2. — Version 9.0.1 Bugfix: Datepicker (German), Usability Optimization 9.0.1
  3. — Version 9.0.0 Improved Share Posts View and Resharer, Network Dev Integration 9.0.0
  4. — Version 8.9.3 Additional Security Update 8.9.3
  5. — Version 8.9.2 Usability Optimization 8.9.2
  6. — Version 8.9.1 Additional Security Update 8.9.1

Known vulnerabilities

via Wordfence Intelligence

25 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

  1. High · 7.2 Blog2Social: Social Media Auto Post & Scheduler <= 8.9.2 - Unauthenticated Stored Cross-Site Scripting ↗
    2026-06-25 CVE-2026-56044 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 8.9.2 Patched in 8.9.3
  2. Medium · 5.4 Blog2Social: Social Media Auto Post & Scheduler <= 8.9.0 - Missing Authorization to Authenticated (Subscriber+) Delete Arbitrary B2S Post Records via 'postId' Parameter ↗
    2026-05-12 CVE-2026-7051 Missing Authorization Affects <= 8.9.0 Patched in 8.9.1
  3. Medium · 4.3 Blog2Social: Social Media Auto Post & Scheduler <= 8.8.3 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary Post Schedule Modification via 'b2s_id' Parameter ↗
    2026-04-07 CVE-2026-4330 Authorization Bypass Through User-Controlled Key Affects <= 8.8.3 Patched in 8.8.4
  4. Medium · 4.3 Blog2Social: Social Media Auto Post & Scheduler <= 8.8.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Meta Deletion via 'b2s_reset_social_meta_tags' AJAX Action ↗
    2026-03-25 CVE-2026-4331 Missing Authorization Affects <= 8.8.2 Patched in 8.8.3
  5. Medium · 6.5 Blog2Social: Social Media Auto Post & Scheduler <= 8.7.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Modification ↗
    2026-02-17 CVE-2026-1942 Missing Authorization Affects <= 8.7.4 Patched in 8.7.5
  6. Medium · 4.3 Blog2Social: Social Media Auto Post & Scheduler <= 8.7.2 - Incorrect Authorization to Authenticated (Subscriber+) Sensitive Information Exposure ↗
    2026-01-09 CVE-2025-14943 Incorrect Authorization Affects <= 8.7.2 Patched in 8.7.3
  7. Medium · 5.4 Blog2Social <= 8.7.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Trashing ↗
    2025-11-24 CVE-2025-13558 Missing Authorization Affects <= 8.7.0 Patched in 8.7.1
  8. Medium · 4.3 Blog2Social: Social Media Auto Post & Scheduler <= 8.6.0 - Authenticated (Subscriber+) Blind Server-Side Request Forgery via post_url ↗
    2025-11-05 CVE-2025-12560 Server-Side Request Forgery (SSRF) Affects <= 8.6.0 Patched in 8.6.1
  9. Medium · 4.3 Blog2Social: Social Media Auto Post & Scheduler <= 8.6.0 - Incorrect Authorization to Video File Upload ↗
    2025-11-05 CVE-2025-12563 Missing Authorization Affects <= 8.6.0 Patched in 8.6.1
  10. Medium · 6.5 Blog2Social <= 8.4.4 - Authenticated (Subscriber+) SQL Injection via `prgSortPostType` Parameter ↗
    2025-06-16 CVE-2025-5673 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 8.4.4 Patched in 8.4.5
  11. Medium · 6.4 Blog2Social: Social Media Auto Post & Scheduler <= 8.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2025-05-01 CVE-2025-4133 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 8.3.3 Patched in 8.4.0
  12. Medium · 6.4 Blog2Social: Social Media Auto Post & Scheduler <= 7.5.4 - Authenticated (Author+) Stored Cross-Site Scripting via File Upload ↗
    2024-07-31 CVE-2024-7302 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 7.5.4 Patched in 7.5.5
  13. Critical · 9.9 Blog2Social: Social Media Auto Post & Scheduler <= 7.4.1 - Authenticated (Subscriber+) SQL Injection ↗
    2024-06-10 CVE-2024-3549 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 7.4.1 Patched in 7.4.2
  14. Medium · 5.3 Blog2Social: Social Media Auto Post & Scheduler <= 7.4.2 - Information Exposure ↗
    2024-04-25 CVE-2024-3678 Missing Authorization Affects <= 7.4.2 Patched in 7.5.0
  15. Medium · 6.1 Blog2Social: Social Media Auto Post & Scheduler <= 7.2.0 - Reflected Cross-Site Scripting ↗
    2023-07-26 CVE-2023-3936 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects < 7.2.1 Patched in 7.2.1
  16. Medium · 6.8 Blog2Social <= 6.9.9 - Authenticated (Subscriber+) Server-Side Request Forgery ↗
    2022-10-03 CVE-2022-3247 Server-Side Request Forgery (SSRF) Affects <= 6.9.9 Patched in 6.9.10
  17. High · 8.8 Blog2Social <= 6.9.9 - Authenticated (Subscriber+) SQL Injection ↗
    2022-10-03 CVE-2022-3246 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 6.9.9 Patched in 6.9.10
  18. Medium · 4.1 Blog2Social <= 6.9.11 - Missing Authorization to Authenticated (Subscriber+) Settings Update ↗
    2022-09-27 CVE-2022-3622 Missing Authorization Affects <= 6.9.11 Patched in 6.9.12
  19. High · 8.5 Blog2Social <= 6.9.3 - PHP Object Injection ↗
    2022-04-05 Deserialization of Untrusted Data Affects <= 6.9.3 Patched in 6.9.4
  20. Medium · 6.1 Blog2Social <= 6.8.6 - Reflected Cross-Site Scripting ↗
    2021-11-22 CVE-2021-24956 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 6.8.6 Patched in 6.8.7
  21. High · 8.8 Blog2Social: Social Media Auto Post & Scheduler <= 6.3.0 - Authenticated SQL Injection ↗
    2020-05-29 CVE-2021-24137 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 6.3.0 Patched in 6.3.1
  22. Medium · 6.1 Blog2Social: Social Media Auto Post & Scheduler < 5.9.0 - Reflected Cross-Site Scripting via b2s_id Parameter ↗
    2019-11-14 CVE-2019-17550 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects < 5.9.0 Patched in 5.9.0
  23. Critical · 9.8 Blog2Social: Social Media Auto Post & Scheduler <= 5.5.0 - SQL Injection ↗
    2019-07-25 CVE-2019-13572 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects < 5.6.0 Patched in 5.6.0
  24. Medium · 6.1 Blog2Social: Social Media Auto Post & Scheduler <= 5.0.2 - Reflected Cross-Site Scripting ↗
    2019-05-02 CVE-2019-9576 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects < 5.0.3 Patched in 5.0.3
  25. High · 7.4 Blog2Social: Social Media Auto Post & Scheduler < 5.0.1 - PHP Object Injection ↗
    2018-09-21 Deserialization of Untrusted Data Affects < 5.0.1 Patched in 5.0.1

Vulnerability records provided by Wordfence Intelligence. Copyright 2012-2026 Defiant Inc. License and terms.

CVE records: Copyright 1999-2026 The MITRE Corporation. CVE terms of use.

Behavioral tests

via WP Hive

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0.1

✓ Low memory footprint
✓ Low page-speed impact
✕ Runs on latest PHP + WP
✓ No PHP errors
✓ No JS errors
✓ Activates cleanly
✕ No resource errors
✓ No external HTTP errors
✓ Optimized database use
✓ Frequently updated

Languages

via translate.wordpress.org

Translated into 16 languages, 3 at 90% or more

German 100%
Hungarian 92%
Russian 92%
Korean 83%
Dutch 72%
Spanish (Spain) 70%
Spanish (Chile) 69%
Italian 56%
Swedish 53%
French (France) 50%
Ukrainian 48%
Portuguese (Brazil) 40%
German (Formal) 26%
Danish 7%
Hebrew 3%
Dutch (Formal) 1%

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

  1. 2025-03-09 60K+ → 50K+ down after 392 days in tier
  2. 2024-02-11 70K+ → 60K+ down after 9 days in tier
  3. 2024-02-02 60K+ → 70K+ up after 6 days in tier
  4. 2024-01-27 70K+ → 60K+ down after 1 days in tier
  5. 2024-01-26 60K+ → 70K+ up after 3 days in tier
  6. 2024-01-23 70K+ → 60K+ down after 2 days in tier
  7. 2024-01-21 60K+ → 70K+ up after 1 days in tier
  8. 2024-01-20 70K+ → 60K+ down after 1 days in tier

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

Compare head to head →

Embed this report card

Drop a live Pulse card for Blog2Social: Social Media Auto Post & Scheduler into a readme, a review or a deck. It updates itself.

<iframe src="https://plugins.wpmayor.com/embed/blog2social" width="480" height="300" style="border:0" loading="lazy" title="Blog2Social: Social Media Auto Post & Scheduler — Plugin Pulse"></iframe>
Preview card ↗

Blog2Social: Social Media Auto Post & Scheduler: 50K+ active installs, 4.5★ (2,097 reviews). Plugin Pulse (WP Mayor), as of 2026-08-25. https://plugins.wpmayor.com/plugin/blog2social