Plugin Pulse Beta
← Pulse

Blog2Social: Social Media Auto Post & Scheduler

by Adenion · Social

Also makes 1 other plugin · 40K+ installs across the portfolio →

Try it live ↗ wp.org ↗

Automatically share and schedule your WordPress content on top social platforms like Facebook, Instagram, LinkedIn, TikTok, and more.

Try it live opens a temporary test site in your browser, which can take about 20 seconds to load. Plugins that rely on outside services or a full server may not work completely there.

M WP Mayor reviewed this plugin Blog2Social Review: Easily Share WordPress Content on Social Media Read review ↗

Health

A 87/100

no flags

Active installs

40K+

≈50K estimated

Momentum

+44%

downloads vs prior 30d

Biggest opportunity: Rating quality scores 90/100. Lift the average: resolve the issues driving the low reviews.

See the detail → Get the free audit
How scoring works →
87 Health · A
Maintenance 100/100
Rating quality 89/100
Support 70/100
Security 75/100

87 health vs 58 average across 1,835 Social plugins

40K+

Active installs

≈50K estimated

5.2M

Total downloads

since 2014 · 0.8% still active

4.5/5

Rating

2,107 reviews · +0.9/wk

+44%

61.3K

Downloads · 30d

category median +1%

Install conversion

How it's measured →

0.8%

of downloads still active

At least 40K of 5.2M lifetime downloads are still running, above its category: the median Social plugin keeps 0.5%, across 1,276 plugins.

Downloads count every update, not just first installs, so older and more frequently released plugins read lower. Compare against other Social plugins, not across the directory. wp.org reports active installs as the bottom of a band, so the real rate is this or higher.

This plugin shipped 27 releases in the last 12 months, and every existing install that updated counted as another download. wp.org publishes no split between first installs and updates, so we show the raw rate rather than guess at one.

Ratings · 2107 reviews

Read on wp.org ↗
5★
1729 4★
125 3★
41 2★
50 1★
162

Details

Version
9.1.5
Last updated
20d ago
Added
2014-11-11 · 11 yrs old
Requires WP
6.2
Tested up to
7.1.4
Requires PHP
7.4
Changelog ↗Support forum ↗Reviews ↗Advanced stats ↗

Directory ranking optimization

How it's scored →

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

98 / 100

Excellent listing optimization

Well tuned across the board

Update recency 100/100

Updated 20 days ago

WP compatibility 100/100

Tested up to WordPress 7.1.4, the current branch or newer

Rating quality 90/100

4.5★ over 2,107 reviews, smoothed to 4.49★

Listing tuning 100/100

5 of 5 tags set · short description in place

Support resolution 100/100

1 of 1 support threads resolved in the last 2 months

Daily downloads

Since 5 Oct 2022 · 1,489 days · wp.org + Plugin Pulse archive

+44% vs prior 30d
3151 Nov 2026

30-day downloads

Rolling 30-day volume · peak 151.9K · peaks are release surges

61.4K1 Nov 2026

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

Blog2Social: Social · #795youBit Social · #2795Viraly · #19596Social Media Auto Po · #2533

Rating trend

Star average over time · dips mark rough releases

4.51 Nov 2026

Health trend

Composite health score, snapshotted daily

871 Nov 2026

Update activity

How busy the existing users are, measured as downloads in the last 30 days for every 1,000 active sites. A spike means a new release everyone's pulling; a long, slow decline means an aging user base that updates less.

1.5K1 Nov 2026

Release cadence

Actively maintained
from wp.org release tags

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

27

releases in the last 12 months

20d ago

latest release · v9.1.5 · 12 Oct 2026

128

tagged releases on record

Recent releases

9.1.5 · 12 Oct 20269.1.4 · 6 Oct 20269.1.3 · 29 Sep 20269.1.2 · 28 Sep 20269.1.1 · 23 Sep 20269.1.0 · 16 Sep 20269.0.3 · 20 Aug 20269.0.2 · 21 Jul 20269.0.1 · 6 Jul 20269.0.0 · 23 Jun 20268.9.3 · 2 Jun 20268.9.2 · 26 May 20268.9.1 · 21 May 20268.9.0 · 14 Apr 2026

What its installed base runs

via wordpress.org

Share of active installs on each version of this plugin. Green is the current release; a big slice on older versions is a user base that has stopped updating.

v9.0 46%
v8.9 10%
v6.0 8.2%
v8.7 7.1%
Older / other versions 28%

Estimated active installs

The public count shows “40K+”. Our estimate pins where the real number sits.

tracked estimate
40K–50K ≈50K

Crossed into this band 21 days ago and the previous band took 19 months to cross, so the real count is still just under 50K.

Install history since 5 Dec 2021

40K1 Nov 2026

Latest updates

via wp.org changelog

Recent releases and news for this plugin

  1. — Version 9.0.2 Usability Optimization 9.0.2
  2. — Version 9.0.1 Bugfix: Datepicker (German), Usability Optimization 9.0.1
  3. — Version 9.0.0 Improved Share Posts View and Resharer, Network Dev Integration 9.0.0
  4. — Version 8.9.3 Additional Security Update 8.9.3
  5. — Version 8.9.2 Usability Optimization 8.9.2
  6. — Version 8.9.1 Additional Security Update 8.9.1

Security history

via Wordfence Intelligence

All 30 disclosed vulnerabilities are patched in the current version (9.1.5). Sites still on an older version should update.

  1. Patched Medium · 4.3 Social Media Auto Post & Scheduler <= 9.1.4 - Authenticated (Contributor+) Insecure Direct Object Reference to Sensitive Information Exposure ↗
    2026-10-14 CVE-2026-108092 Authorization Bypass Through User-Controlled Key Affects <= 9.1.4 Patched in 9.1.5
  2. Patched Medium · 4.3 Blog2Social: Social Media Auto Post & Scheduler <= 9.1.0 - Missing Authorization to Authenticated (Contributor+) Arbitrary Modification via Multiple AJAX Handlers ↗
    2026-09-24 CVE-2026-92829 Missing Authorization Affects <= 9.1.0 Patched in 9.1.1
  3. Patched Medium · 4.3 Blog2Social: Social Media Auto Post & Scheduler <= 9.0.0 - Insecure Direct Object Reference ↗
    2026-09-16 CVE-2026-89031 Authorization Bypass Through User-Controlled Key Affects <= 9.0.0 Patched in 9.1.0
  4. Patched Medium · 4.3 Blog2Social: Social Media Auto Post & Scheduler <= 9.0.0 - Authenticated (Subscriber+) Username Enumeration ↗
    2026-09-16 CVE-2026-89029 Missing Authorization Affects <= 9.0.0 Patched in 9.1.0
  5. Patched Medium · 4.3 Blog2Social: Social Media Auto Post & Scheduler <= 9.0.0 - Missing Authorization ↗
    2026-09-16 CVE-2026-89030 Missing Authorization Affects <= 9.0.0 Patched in 9.1.0
  6. Patched High · 7.2 Blog2Social: Social Media Auto Post & Scheduler <= 8.9.2 - Unauthenticated Stored Cross-Site Scripting ↗
    2026-06-25 CVE-2026-56044 Improper Neutralization of Input During Web Page Generation Affects <= 8.9.2 Patched in 8.9.3
  7. Patched Medium · 5.4 Blog2Social: Social Media Auto Post & Scheduler <= 8.9.0 - Missing Authorization to Authenticated (Subscriber+) Delete Arbitrary B2S Post Records via 'postId' Parameter ↗
    2026-05-12 CVE-2026-7051 Missing Authorization Affects <= 8.9.0 Patched in 8.9.1
  8. Patched Medium · 4.3 Blog2Social: Social Media Auto Post & Scheduler <= 8.8.3 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary Post Schedule Modification via 'b2s_id' Parameter ↗
    2026-04-07 CVE-2026-4330 Authorization Bypass Through User-Controlled Key Affects <= 8.8.3 Patched in 8.8.4
  9. Patched Medium · 4.3 Blog2Social: Social Media Auto Post & Scheduler <= 8.8.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Meta Deletion via 'b2s_reset_social_meta_tags' AJAX Action ↗
    2026-03-25 CVE-2026-4331 Missing Authorization Affects <= 8.8.2 Patched in 8.8.3
  10. Patched Medium · 6.5 Blog2Social: Social Media Auto Post & Scheduler <= 8.7.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Modification ↗
    2026-02-17 CVE-2026-1942 Missing Authorization Affects <= 8.7.4 Patched in 8.7.5
  11. Patched Medium · 4.3 Blog2Social: Social Media Auto Post & Scheduler <= 8.7.2 - Incorrect Authorization to Authenticated (Subscriber+) Sensitive Information Exposure ↗
    2026-01-09 CVE-2025-14943 Incorrect Authorization Affects <= 8.7.2 Patched in 8.7.3
  12. Patched Medium · 5.4 Blog2Social <= 8.7.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Trashing ↗
    2025-11-24 CVE-2025-13558 Missing Authorization Affects <= 8.7.0 Patched in 8.7.1
  13. Patched Medium · 4.3 Blog2Social: Social Media Auto Post & Scheduler <= 8.6.0 - Authenticated (Subscriber+) Blind Server-Side Request Forgery via post_url ↗
    2025-11-05 CVE-2025-12560 Server-Side Request Forgery Affects <= 8.6.0 Patched in 8.6.1
  14. Patched Medium · 4.3 Blog2Social: Social Media Auto Post & Scheduler <= 8.6.0 - Incorrect Authorization to Video File Upload ↗
    2025-11-05 CVE-2025-12563 Missing Authorization Affects <= 8.6.0 Patched in 8.6.1
  15. Patched Medium · 6.5 Blog2Social <= 8.4.4 - Authenticated (Subscriber+) SQL Injection via `prgSortPostType` Parameter ↗
    2025-06-16 CVE-2025-5673 Improper Neutralization of Special Elements used in an SQL Command Affects <= 8.4.4 Patched in 8.4.5
  16. Patched Medium · 6.4 Blog2Social: Social Media Auto Post & Scheduler <= 8.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2025-05-01 CVE-2025-4133 Improper Neutralization of Input During Web Page Generation Affects <= 8.3.3 Patched in 8.4.0
  17. Patched Medium · 6.4 Blog2Social: Social Media Auto Post & Scheduler <= 7.5.4 - Authenticated (Author+) Stored Cross-Site Scripting via File Upload ↗
    2024-07-31 CVE-2024-7302 Improper Neutralization of Input During Web Page Generation Affects <= 7.5.4 Patched in 7.5.5
  18. Patched Critical · 9.9 Blog2Social: Social Media Auto Post & Scheduler <= 7.4.1 - Authenticated (Subscriber+) SQL Injection ↗
    2024-06-10 CVE-2024-3549 Improper Neutralization of Special Elements used in an SQL Command Affects <= 7.4.1 Patched in 7.4.2
  19. Patched Medium · 5.3 Blog2Social: Social Media Auto Post & Scheduler <= 7.4.2 - Information Exposure ↗
    2024-04-25 CVE-2024-3678 Missing Authorization Affects <= 7.4.2 Patched in 7.5.0
  20. Patched Medium · 6.1 Blog2Social: Social Media Auto Post & Scheduler <= 7.2.0 - Reflected Cross-Site Scripting ↗
    2023-07-26 CVE-2023-3936 Improper Neutralization of Input During Web Page Generation Affects < 7.2.1 Patched in 7.2.1
  21. Patched Medium · 6.8 Blog2Social <= 6.9.9 - Authenticated (Subscriber+) Server-Side Request Forgery ↗
    2022-10-03 CVE-2022-3247 Server-Side Request Forgery Affects <= 6.9.9 Patched in 6.9.10
  22. Patched High · 8.8 Blog2Social <= 6.9.9 - Authenticated (Subscriber+) SQL Injection ↗
    2022-10-03 CVE-2022-3246 Improper Neutralization of Special Elements used in an SQL Command Affects <= 6.9.9 Patched in 6.9.10
  23. Patched Medium · 4.1 Blog2Social <= 6.9.11 - Missing Authorization to Authenticated (Subscriber+) Settings Update ↗
    2022-09-27 CVE-2022-3622 Missing Authorization Affects <= 6.9.11 Patched in 6.9.12
  24. Patched High · 8.5 Blog2Social <= 6.9.3 - PHP Object Injection ↗
    2022-04-05 Deserialization of Untrusted Data Affects <= 6.9.3 Patched in 6.9.4
  25. Patched Medium · 6.1 Blog2Social <= 6.8.6 - Reflected Cross-Site Scripting ↗
    2021-11-22 CVE-2021-24956 Improper Neutralization of Input During Web Page Generation Affects <= 6.8.6 Patched in 6.8.7
  26. Patched High · 8.8 Blog2Social: Social Media Auto Post & Scheduler <= 6.3.0 - Authenticated SQL Injection ↗
    2020-05-29 CVE-2021-24137 Improper Neutralization of Special Elements used in an SQL Command Affects <= 6.3.0 Patched in 6.3.1
  27. Patched Medium · 6.1 Blog2Social: Social Media Auto Post & Scheduler < 5.9.0 - Reflected Cross-Site Scripting via b2s_id Parameter ↗
    2019-11-14 CVE-2019-17550 Improper Neutralization of Input During Web Page Generation Affects < 5.9.0 Patched in 5.9.0
  28. Patched Critical · 9.8 Blog2Social: Social Media Auto Post & Scheduler <= 5.5.0 - SQL Injection ↗
    2019-07-25 CVE-2019-13572 Improper Neutralization of Special Elements used in an SQL Command Affects < 5.6.0 Patched in 5.6.0
  29. Patched Medium · 6.1 Blog2Social: Social Media Auto Post & Scheduler <= 5.0.2 - Reflected Cross-Site Scripting ↗
    2019-05-02 CVE-2019-9576 Improper Neutralization of Input During Web Page Generation Affects < 5.0.3 Patched in 5.0.3
  30. Patched High · 7.4 Blog2Social: Social Media Auto Post & Scheduler < 5.0.1 - PHP Object Injection ↗
    2018-09-21 Deserialization of Untrusted Data Affects < 5.0.1 Patched in 5.0.1

Vulnerability records provided by Wordfence Intelligence. Copyright 2012-2026 Defiant Inc. License and terms.

CVE records: Copyright 1999-2026 The MITRE Corporation. CVE terms of use.

Languages

via translate.wordpress.org

Translated into 17 languages, 1 at 90% or more

German 99%
Hungarian 87%
Russian 87%
Korean 79%
Dutch 68%
Spanish (Spain) 67%
Spanish (Chile) 65%
Italian 53%
Swedish 50%
French (France) 47%
Ukrainian 45%
Portuguese (Brazil) 37%
German (Formal) 25%
Danish 6%
Turkish 3%
Hebrew 2%
Dutch (Formal) 1%

AI assistants

How it's measured →

Whether ChatGPT and Claude name this plugin when asked the category question, and whether the readme gives them something to quote.

Premium

Share of voice

How often each assistant names Blog2Social: Social Media Auto Post & Scheduler when asked about this topic, where it comes in the answer, and how that compares with its wp.org search position. Latest run 1 Nov 2026.

Assistants
ChatGPT, Claude
Topics tracked
Social feeds
Get early access to Premium →

Readme readiness

6 of 8 pass · checked 25 Oct 2026

Can an assistant quote this readme? Eight deterministic checks over the wp.org listing, no model involved.

  • ✓ Says what it does "Automatically share and schedule your WordPress content on top social platforms like Facebook, Instagram, L..."
  • ✓ Has a FAQ 6 questions in the FAQ.
  • ✓ FAQ asks real questions 6 of 6 read like questions a user would type.
  • ! Names who it is for Never says who the plugin is for or what they use it for.
  • ✓ Names what it works with Mentions WooCommerce, Gutenberg, Google Analytics, Discord and 9 more.
  • ✓ Headings and lists 3 headings and 4 lists.
  • ✓ Enough to quote 6,783 characters of description.
  • ! Tags match the text Only 1 of 5 tags appear in the text ("auto post", "auto repost", "cross posting", "social media scheduler" missing).

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

  1. 2026-10-11 50K+ → 40K+ down after 581 days in tier
  2. 2025-03-09 60K+ → 50K+ down after 392 days in tier
  3. 2024-02-11 70K+ → 60K+ down after 9 days in tier
  4. 2024-02-02 60K+ → 70K+ up after 6 days in tier
  5. 2024-01-27 70K+ → 60K+ down after 1 days in tier
  6. 2024-01-26 60K+ → 70K+ up after 3 days in tier
  7. 2024-01-23 70K+ → 60K+ down after 2 days in tier
  8. 2024-01-21 60K+ → 70K+ up after 1 days in tier

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

Embed this report card

Drop a live Pulse card for Blog2Social: Social Media Auto Post & Scheduler into a readme, a review or a deck. It updates itself.

<iframe src="https://plugins.wpmayor.com/embed/blog2social" width="480" height="300" style="border:0" loading="lazy" title="Blog2Social: Social Media Auto Post & Scheduler — Plugin Pulse"></iframe>
Preview card ↗

Blog2Social: Social Media Auto Post & Scheduler: 40K+ active installs, 4.5★ (2,107 reviews). Plugin Pulse (WP Mayor), as of 2026-11-01. https://plugins.wpmayor.com/plugin/blog2social

Spotted a number that looks wrong? Report a data issue and we'll check it against the source.