Social Publisher
Social Publisher helps you publish WordPress content to multiple social networks from one place inside your dashboard. Connect your accounts, choose where each post should be shared, customize the message, attach an image, and publish without jumping between platforms. Designed for a simple workflow, Social Publisher supports manual publishing from its main screen and auto-post options from the WordPress editor. Main features Publish to multiple social networks from one dashboard Connect and manage accounts in one place Write a custom message before publishing Use the built-in image cropper before posting Trigger auto-post options from the Gutenberg editor Disconnect accounts and restart a connection from zero when needed Review debug logs when troubleshooting a connection or publish attempt Supported networks Social Publisher currently supports: Bluesky Mastodon Tumblr Pinterest Threads Instagram LinkedIn Blogger Telegram Facebook Pages Support for some networks may depend on the account type, app approval status, or provider requirements. Who is this plugin for? Social Publisher is a good fit for: bloggers who want a simpler social publishing workflow site owners who publish to more than one network content creators who want to manage sharing from WordPress admins who want account connections and publishing tools in one place External services Social Publisher connects to external services only when a site administrator enables a provider, starts an authorization flow, tests a connection, opens a share action, or publishes content to that provider. The plugin stores the credentials returned by each provider in the WordPress database for the current site. It uses those credentials only to validate the connection and publish content chosen by the administrator. Debug logs are sanitized to avoid storing access tokens or OAuth secrets in clear text. No data is sent to a social network unless that specific integration is configured and used. Bluesky Service provider: Bluesky Social, PBC. Domains/endpoints used: https://bsky.social/xrpc/ What it is used for: authenticating with a Bluesky handle and app password, uploading images, and creating Bluesky posts. Data sent and when: when the administrator saves or tests the Bluesky connection, the plugin sends the configured handle and app password to Bluesky. When publishing, it sends the post text, link, optional image data, and the authenticated account identifier to Bluesky. Terms: https://bsky.social/about/support/tos Privacy policy: https://bsky.social/about/support/privacy-policy Mastodon Service provider: the Mastodon server/instance selected by the site administrator. Mastodon is federated, so the exact provider, terms, and privacy policy depend on the selected instance. Domains/endpoints used: the plugin connects over HTTPS to the administrator-selected Mastodon instance. Example endpoints include https://mastodon.social/api/v1/accounts/verify_credentials, https://mastodon.social/api/v1/statuses, https://mastodon.social/api/v1/media, and https://mastodon.social/api/v1/apps. The domain changes when the administrator enters a different instance. What it is used for: registering or connecting an app on the selected Mastodon instance, validating the account, uploading media, checking uploaded media, and publishing statuses. Data sent and when: when the administrator saves, tests, or connects Mastodon, the plugin sends the selected server name, callback/redirect details, OAuth app data, authorization code, client credentials, and access token to that selected instance. When publishing, it sends the status text, link, optional media files, visibility settings, and account token to that selected instance. Terms: each Mastodon instance publishes its own terms. Review the selected instance terms before connecting it. Example for mastodon.social: https://mastodon.social/terms Privacy policy: each Mastodon instance publishes its own privacy policy. Example for mastodon.social: https://mastodon.social/privacy-policy Tumblr Service provider: Tumblr. Domains/endpoints used: https://www.tumblr.com/oauth/ and https://api.tumblr.com/v2/. What it is used for: OAuth authentication, validating the configured blog, retrieving basic account/blog information, and publishing posts to the selected Tumblr blog. Data sent and when: during connection, the plugin sends the Consumer Key, Consumer Secret, OAuth verifier, callback URL, token, token secret, and blog identifier to Tumblr. When publishing, it sends the post title/text, link, tags, optional image/media data, and blog identifier. Terms: https://www.tumblr.com/policy/en/terms-of-service Privacy policy: https://www.tumblr.com/privacy/en Pinterest Service provider: Pinterest. Domains/endpoints used: https://www.pinterest.com/oauth/, https://api.pinterest.com/v5/, and https://api-sandbox.pinterest.com/v5/ when sandbox mode is selected. What it is used for: OAuth authentication, validating account access, selecting boards when available, and creating Pins. Data sent and when: during connection, the plugin sends the configured App ID, App Secret, redirect/callback URL, authorization code, requested scopes, and token data to Pinterest. When publishing, it sends the Pin title/description, destination link, selected board, and optional image URL or media data. Terms: https://policy.pinterest.com/en/terms-of-service Developer/API terms: https://developers.pinterest.com/terms/ Privacy policy: https://policy.pinterest.com/en/privacy-policy Threads Service provider: Meta Platforms, Inc. / Threads. Domains/endpoints used: https://threads.net/oauth/ and https://graph.threads.net/. Example endpoints include https://graph.threads.net/v1.0/me, https://graph.threads.net/v1.0/{user-id}/threads, and https://graph.threads.net/v1.0/{container-id}/publish. What it is used for: OAuth authentication, account validation, media container creation, checking media container status, and publishing Threads posts. Data sent and when: during connection, the plugin sends the configured App ID, App Secret, redirect/callback URL, authorization code, requested scopes, and access token data to Meta/Threads endpoints. When validating or publishing, it sends the post text, link, optional media URL/data, container IDs, account identifier, and access token to Meta/Threads endpoints. Meta Platform Terms: https://developers.facebook.com/terms/dfc_platform_terms/ Threads API documentation: https://developers.facebook.com/docs/threads/ Meta Privacy Policy: https://www.facebook.com/privacy/policy/ Instagram Service provider: Meta Platforms, Inc. / Instagram. Domains/endpoints used: https://www.instagram.com/oauth/, https://api.instagram.com/oauth/, and https://graph.instagram.com/. What it is used for: OAuth authentication, account validation, media container creation, and publishing Instagram content when the configured account and permissions allow it. Data sent and when: during connection, the plugin sends the configured Client/App ID, Client/App Secret, redirect/callback URL, authorization code, requested scopes, and token data to Instagram/Meta endpoints. When publishing, it sends the caption/text, link when supported by the provider, optional image/media URL/data, container IDs, and account identifier. Meta Platform Terms: https://developers.facebook.com/terms/dfc_platform_terms/ Meta Privacy Policy: https://www.facebook.com/privacy/policy/ Facebook Pages Service provider: Meta Platforms, Inc. / Facebook. Domains/endpoints used: https://www.facebook.com/v20.0/dialog/oauth and https://graph.facebook.com/v20.0/. What it is used for: OAuth authentication, retrieving available Pages for the authorized account, storing the selected Page token, and publishing to Facebook Pages. The plugin can also open Facebook’s public share dialog when the administrator uses the Facebook share action. Data sent and when: during connection, the plugin sends the configured App ID, App Secret, redirect/callback URL, authorization code, requested scopes, and token data to Facebook/Meta endpoints. When loading available Pages, it sends the account token and receives Page identifiers and Page names. When publishing, it sends the selected Page ID/token, post message, link, and optional image/media data. When using the public share action, it opens a Facebook URL containing the page URL to share. Meta Platform Terms: https://developers.facebook.com/terms/dfc_platform_terms/ Meta Privacy Policy: https://www.facebook.com/privacy/policy/ LinkedIn Service provider: LinkedIn. Domains/endpoints used: https://www.linkedin.com/oauth/v2/ and https://api.linkedin.com/. What it is used for: OAuth authentication, retrieving basic member/profile information when available, validating the configured person or organization URN, initializing image uploads, uploading images, and publishing posts. Data sent and when: during connection, the plugin sends the configured Client ID, Client Secret, redirect/callback URL, authorization code, requested scopes, and token data to LinkedIn. When validating or publishing, it sends the person/organization URN, post text, link, optional image data, upload URL data, and access token. User Agreement: https://www.linkedin.com/legal/user-agreement API Terms of Use: https://legal.linkedin.com/api-terms-of-use Privacy policy: https://www.linkedin.com/legal/privacy-policy Blogger / Google Service provider: Google / Blogger. Domains/endpoints used: https://accounts.google.com/o/oauth2/v2/auth, https://oauth2.googleapis.com/token, and https://www.googleapis.com/blogger/v3/. What it is used for: OAuth authentication, selecting the destination Blogger blog, reading basic blog information, refreshing tokens when needed, and publishing Blogger posts. Data sent and when: during connection, the plugin sends the configured Client ID, Client Secret, redirect/callback URL, authorization code, requested Blogger scopes, refresh token, and access token data to Google. When selecting or publishing to a blog, it sends the blog ID, post title/content, labels when used, and token data to the Blogger API. Google APIs Terms of Service: https://developers.google.com/terms Google Terms of Service: https://policies.google.com/terms Google Privacy Policy: https://policies.google.com/privacy Telegram Service provider: Telegram Messenger Inc. / Telegram Bot API. Domains/endpoints used: https://api.telegram.org/. Example methods include getMe, getChat, sendMessage, and sendPhoto. What it is used for: validating the configured bot token and chat destination, then publishing posts to the selected Telegram group, supergroup, channel, or forum topic. Data sent and when: when the administrator saves or tests Telegram, the plugin sends the Bot Token and configured chat ID to Telegram Bot API endpoints to validate the connection. When publishing, it sends the post title/text, link, hashtags, optional image URL, optional topic/thread ID, and the destination chat ID. Terms: https://telegram.org/tos Bot API documentation: https://core.telegram.org/bots/api Privacy policy: https://telegram.org/privacy Flipboard Service provider: Flipboard. Domains/endpoints used: https://share.flipboard.com/. What it is used for: opening Flipboard’s public share window when the administrator uses the Flipboard share action. Data sent and when: when the administrator uses the Flipboard share action, the plugin opens a Flipboard URL containing the public page URL to share. The plugin does not store Flipboard credentials. Terms: https://about.flipboard.com/terms-of-service/ Privacy policy: https://about.flipboard.com/privacy-policy/
