Maira Foresto

<p>Social Publisher helps you publish WordPress content to multiple social networks from one place inside your dashboard.</p>
<p>Connect your accounts, choose where each post should be shared, customize the message, attach an image, and publish without jumping between platforms.</p>
<p>Designed for a simple workflow, Social Publisher supports manual publishing from its main screen and auto-post options from the WordPress editor.</p>
<h4>Main features</h4>
<ul>
<li>Publish to multiple social networks from one dashboard</li>
<li>Connect and manage accounts in one place</li>
<li>Write a custom message before publishing</li>
<li>Use the built-in image cropper before posting</li>
<li>Trigger auto-post options from the Gutenberg editor</li>
<li>Disconnect accounts and restart a connection from zero when needed</li>
<li>Review debug logs when troubleshooting a connection or publish attempt</li>
</ul>
<h4>Supported networks</h4>
<p>Social Publisher currently supports:</p>
<ul>
<li>Bluesky</li>
<li>Mastodon</li>
<li>Tumblr</li>
<li>Pinterest</li>
<li>Threads</li>
<li>Instagram</li>
<li>LinkedIn</li>
<li>Blogger</li>
<li>Telegram</li>
<li>Facebook Pages</li>
</ul>
<p>Support for some networks may depend on the account type, app approval status, or provider requirements.</p>
<h4>Who is this plugin for?</h4>
<p>Social Publisher is a good fit for:</p>
<ul>
<li>bloggers who want a simpler social publishing workflow</li>
<li>site owners who publish to more than one network</li>
<li>content creators who want to manage sharing from WordPress</li>
<li>admins who want account connections and publishing tools in one place</li>
</ul>
<h3>External services</h3>
<p>Social Publisher connects to external services only when a site administrator enables a provider, starts an authorization flow, tests a connection, opens a share action, or publishes content to that provider.</p>
<p>The plugin stores the credentials returned by each provider in the WordPress database for the current site. It uses those credentials only to validate the connection and publish content chosen by the administrator. Debug logs are sanitized to avoid storing access tokens or OAuth secrets in clear text.</p>
<p>No data is sent to a social network unless that specific integration is configured and used.</p>
<h4>Bluesky</h4>
<p>Service provider: Bluesky Social, PBC.</p>
<p>Domains/endpoints used: https://bsky.social/xrpc/</p>
<p>What it is used for: authenticating with a Bluesky handle and app password, uploading images, and creating Bluesky posts.</p>
<p>Data sent and when: when the administrator saves or tests the Bluesky connection, the plugin sends the configured handle and app password to Bluesky. When publishing, it sends the post text, link, optional image data, and the authenticated account identifier to Bluesky.</p>
<p>Terms: https://bsky.social/about/support/tos<br />
Privacy policy: https://bsky.social/about/support/privacy-policy</p>
<h4>Mastodon</h4>
<p>Service provider: the Mastodon server/instance selected by the site administrator. Mastodon is federated, so the exact provider, terms, and privacy policy depend on the selected instance.</p>
<p>Domains/endpoints used: the plugin connects over HTTPS to the administrator-selected Mastodon instance. Example endpoints include https://mastodon.social/api/v1/accounts/verify_credentials, https://mastodon.social/api/v1/statuses, https://mastodon.social/api/v1/media, and https://mastodon.social/api/v1/apps. The domain changes when the administrator enters a different instance.</p>
<p>What it is used for: registering or connecting an app on the selected Mastodon instance, validating the account, uploading media, checking uploaded media, and publishing statuses.</p>
<p>Data sent and when: when the administrator saves, tests, or connects Mastodon, the plugin sends the selected server name, callback/redirect details, OAuth app data, authorization code, client credentials, and access token to that selected instance. When publishing, it sends the status text, link, optional media files, visibility settings, and account token to that selected instance.</p>
<p>Terms: each Mastodon instance publishes its own terms. Review the selected instance terms before connecting it. Example for mastodon.social: https://mastodon.social/terms<br />
Privacy policy: each Mastodon instance publishes its own privacy policy. Example for mastodon.social: https://mastodon.social/privacy-policy</p>
<h4>Tumblr</h4>
<p>Service provider: Tumblr.</p>
<p>Domains/endpoints used: https://www.tumblr.com/oauth/ and https://api.tumblr.com/v2/.</p>
<p>What it is used for: OAuth authentication, validating the configured blog, retrieving basic account/blog information, and publishing posts to the selected Tumblr blog.</p>
<p>Data sent and when: during connection, the plugin sends the Consumer Key, Consumer Secret, OAuth verifier, callback URL, token, token secret, and blog identifier to Tumblr. When publishing, it sends the post title/text, link, tags, optional image/media data, and blog identifier.</p>
<p>Terms: https://www.tumblr.com/policy/en/terms-of-service<br />
Privacy policy: https://www.tumblr.com/privacy/en</p>
<h4>Pinterest</h4>
<p>Service provider: Pinterest.</p>
<p>Domains/endpoints used: https://www.pinterest.com/oauth/, https://api.pinterest.com/v5/, and https://api-sandbox.pinterest.com/v5/ when sandbox mode is selected.</p>
<p>What it is used for: OAuth authentication, validating account access, selecting boards when available, and creating Pins.</p>
<p>Data sent and when: during connection, the plugin sends the configured App ID, App Secret, redirect/callback URL, authorization code, requested scopes, and token data to Pinterest. When publishing, it sends the Pin title/description, destination link, selected board, and optional image URL or media data.</p>
<p>Terms: https://policy.pinterest.com/en/terms-of-service<br />
Developer/API terms: https://developers.pinterest.com/terms/<br />
Privacy policy: https://policy.pinterest.com/en/privacy-policy</p>
<h4>Threads</h4>
<p>Service provider: Meta Platforms, Inc. / Threads.</p>
<p>Domains/endpoints used: https://threads.net/oauth/ and https://graph.threads.net/. Example endpoints include https://graph.threads.net/v1.0/me, https://graph.threads.net/v1.0/{user-id}/threads, and https://graph.threads.net/v1.0/{container-id}/publish.</p>
<p>What it is used for: OAuth authentication, account validation, media container creation, checking media container status, and publishing Threads posts.</p>
<p>Data sent and when: during connection, the plugin sends the configured App ID, App Secret, redirect/callback URL, authorization code, requested scopes, and access token data to Meta/Threads endpoints. When validating or publishing, it sends the post text, link, optional media URL/data, container IDs, account identifier, and access token to Meta/Threads endpoints.</p>
<p>Meta Platform Terms: https://developers.facebook.com/terms/dfc_platform_terms/<br />
Threads API documentation: https://developers.facebook.com/docs/threads/<br />
Meta Privacy Policy: https://www.facebook.com/privacy/policy/</p>
<h4>Instagram</h4>
<p>Service provider: Meta Platforms, Inc. / Instagram.</p>
<p>Domains/endpoints used: https://www.instagram.com/oauth/, https://api.instagram.com/oauth/, and https://graph.instagram.com/.</p>
<p>What it is used for: OAuth authentication, account validation, media container creation, and publishing Instagram content when the configured account and permissions allow it.</p>
<p>Data sent and when: during connection, the plugin sends the configured Client/App ID, Client/App Secret, redirect/callback URL, authorization code, requested scopes, and token data to Instagram/Meta endpoints. When publishing, it sends the caption/text, link when supported by the provider, optional image/media URL/data, container IDs, and account identifier.</p>
<p>Meta Platform Terms: https://developers.facebook.com/terms/dfc_platform_terms/<br />
Meta Privacy Policy: https://www.facebook.com/privacy/policy/</p>
<h4>Facebook Pages</h4>
<p>Service provider: Meta Platforms, Inc. / Facebook.</p>
<p>Domains/endpoints used: https://www.facebook.com/v20.0/dialog/oauth and https://graph.facebook.com/v20.0/.</p>
<p>What it is used for: OAuth authentication, retrieving available Pages for the authorized account, storing the selected Page token, and publishing to Facebook Pages. The plugin can also open Facebook’s public share dialog when the administrator uses the Facebook share action.</p>
<p>Data sent and when: during connection, the plugin sends the configured App ID, App Secret, redirect/callback URL, authorization code, requested scopes, and token data to Facebook/Meta endpoints. When loading available Pages, it sends the account token and receives Page identifiers and Page names. When publishing, it sends the selected Page ID/token, post message, link, and optional image/media data. When using the public share action, it opens a Facebook URL containing the page URL to share.</p>
<p>Meta Platform Terms: https://developers.facebook.com/terms/dfc_platform_terms/<br />
Meta Privacy Policy: https://www.facebook.com/privacy/policy/</p>
<h4>LinkedIn</h4>
<p>Service provider: LinkedIn.</p>
<p>Domains/endpoints used: https://www.linkedin.com/oauth/v2/ and https://api.linkedin.com/.</p>
<p>What it is used for: OAuth authentication, retrieving basic member/profile information when available, validating the configured person or organization URN, initializing image uploads, uploading images, and publishing posts.</p>
<p>Data sent and when: during connection, the plugin sends the configured Client ID, Client Secret, redirect/callback URL, authorization code, requested scopes, and token data to LinkedIn. When validating or publishing, it sends the person/organization URN, post text, link, optional image data, upload URL data, and access token.</p>
<p>User Agreement: https://www.linkedin.com/legal/user-agreement<br />
API Terms of Use: https://legal.linkedin.com/api-terms-of-use<br />
Privacy policy: https://www.linkedin.com/legal/privacy-policy</p>
<h4>Blogger / Google</h4>
<p>Service provider: Google / Blogger.</p>
<p>Domains/endpoints used: https://accounts.google.com/o/oauth2/v2/auth, https://oauth2.googleapis.com/token, and https://www.googleapis.com/blogger/v3/.</p>
<p>What it is used for: OAuth authentication, selecting the destination Blogger blog, reading basic blog information, refreshing tokens when needed, and publishing Blogger posts.</p>
<p>Data sent and when: during connection, the plugin sends the configured Client ID, Client Secret, redirect/callback URL, authorization code, requested Blogger scopes, refresh token, and access token data to Google. When selecting or publishing to a blog, it sends the blog ID, post title/content, labels when used, and token data to the Blogger API.</p>
<p>Google APIs Terms of Service: https://developers.google.com/terms<br />
Google Terms of Service: https://policies.google.com/terms<br />
Google Privacy Policy: https://policies.google.com/privacy</p>
<h4>Telegram</h4>
<p>Service provider: Telegram Messenger Inc. / Telegram Bot API.</p>
<p>Domains/endpoints used: https://api.telegram.org/. Example methods include getMe, getChat, sendMessage, and sendPhoto.</p>
<p>What it is used for: validating the configured bot token and chat destination, then publishing posts to the selected Telegram group, supergroup, channel, or forum topic.</p>
<p>Data sent and when: when the administrator saves or tests Telegram, the plugin sends the Bot Token and configured chat ID to Telegram Bot API endpoints to validate the connection. When publishing, it sends the post title/text, link, hashtags, optional image URL, optional topic/thread ID, and the destination chat ID.</p>
<p>Terms: https://telegram.org/tos<br />
Bot API documentation: https://core.telegram.org/bots/api<br />
Privacy policy: https://telegram.org/privacy</p>
<h4>Flipboard</h4>
<p>Service provider: Flipboard.</p>
<p>Domains/endpoints used: https://share.flipboard.com/.</p>
<p>What it is used for: opening Flipboard’s public share window when the administrator uses the Flipboard share action.</p>
<p>Data sent and when: when the administrator uses the Flipboard share action, the plugin opens a Flipboard URL containing the public page URL to share. The plugin does not store Flipboard credentials.</p>
<p>Terms: https://about.flipboard.com/terms-of-service/<br />
Privacy policy: https://about.flipboard.com/privacy-policy/</p>


Social Publisher

Publish WordPress posts to multiple social networks from one simple dashboard.

SevenBirds

<p><strong>FediStation</strong> turns every article on your blog into a node of the Open Social Web. No accounts required for your readers to use the panel — just click and share to the Fediverse network of their choice.</p>
<h4>Features</h4>
<ul>
<li><strong>Side panel</strong> with one-click sharing to Mastodon, Bluesky, Flipboard, Threads, and Lemmy</li>
<li><strong>Instance-aware sharing</strong> for Mastodon and Lemmy (visitor picks their home instance)</li>
<li><strong>Live FediFind search bar</strong> (optional) — visitors search Mastodon, Bluesky, and Flipboard from your site</li>
<li><strong>Channel Boost</strong> (requires free FediBoard account) — push articles to topic-specific Fediverse channels: Travel, Food, Lifestyle, Wellness, Culture, Science</li>
<li><strong>FediFind Discoveries</strong> (optional, free) — submit articles to the open-web index at fedifind.com</li>
<li><strong>Per-post override</strong> — show or hide the panel on individual posts via metabox</li>
<li><strong>No tracking, no third-party analytics, no Google Fonts on the frontend</strong> — your readers’ privacy is respected by default</li>
<li><strong>Light and dark mode</strong> admin UI</li>
</ul>
<h4>Why this matters</h4>
<p>The web is consolidating into a handful of closed platforms. FediStation gives WordPress publishers — still the backbone of the open web at ~40% of all sites — a simple bridge to send their content into the Fediverse, where readers and conversations live on user-owned servers and federated protocols.</p>
<h4>Requirements</h4>
<ul>
<li>WordPress 6.0+</li>
<li>PHP 8.0+</li>
<li>A free <a href="https://fediboard.com" rel="nofollow ugc">FediBoard</a> account (optional — only required for Channel Boost)</li>
<li>A free <a href="https://fedifind.com" rel="nofollow ugc">FediFind</a> account (optional — only required for Discoveries submission)</li>
</ul>
<h3>External services</h3>
<p>This plugin connects to a small number of external services. They are all operated by FediBoard (the plugin’s author) and are only contacted under the conditions described below. No service is contacted on every page view, and no visitor data is sent without an explicit user action.</p>
<h4>FediBoard Channel Boost API (api.fediboard.com)</h4>
<p>Used for the FediBoard “Channel Boost” feature, which submits an article to FediBoard topic channels for cross-posting to the Fediverse. Contacted only when an administrator:</p>
<ul>
<li>Clicks the <strong>Boost Now</strong> button in the panel — sends the article URL, title, description, featured image URL, optional caption and hashtags, plus the administrator’s FediBoard licence key.</li>
<li>Opens the FediBoard quota indicator — sends the licence key to read the remaining monthly boost count.</li>
<li>Opens the FediStation settings page when a FediBoard account is linked — sends the licence key to read the current account status and tier.</li>
</ul>
<p>No data is sent from the frontend or for non-administrator visitors.</p>
<p>Terms & Privacy: https://fediboard.com/legal#fedistation</p>
<h4>FediBoard Panel Banner (fediboard.com)</h4>
<p>When an administrator opens the FediStation side panel on a post, the panel fetches a small JSON configuration file (<code>/wp-top-banner-section.json</code>) from fediboard.com to display a rotating notice in the panel header (e.g. links to FediBoard, Ko-fi support). Only the JSON file is fetched — no data is sent, and no cookies are set. The fetch occurs once per panel open.</p>
<p>Terms & Privacy: https://fediboard.com/legal#fedistation</p>
<h4>FediStation Anonymous Usage Stats (api.fediboard.com)</h4>
<p>FediStation sends a very small number of <strong>anonymous, aggregate pings</strong> to api.fediboard.com so we can understand which features are useful and prioritise development. Each ping contains only:</p>
<ul>
<li>A randomly generated install UUID (no PII, no IP, no URL, no post title, no domain name).</li>
<li>The plugin version.</li>
<li>The event name (e.g. <code>install</code>, <code>boost_submitted</code>, <code>fedifind_submitted</code>).</li>
</ul>
<p>These pings are fire-and-forget and never delay a page response. To disable all anonymous stats, add this filter to your theme’s <code>functions.php</code> or a site-specific plugin:</p>
<pre><code>add_filter( 'fedistation_stats_enabled', '__return_false' );
</code></pre>
<p>Terms & Privacy: https://fediboard.com/legal#fedistation</p>
<h4>FediFind Discoveries (fedifind.com)</h4>
<p>FediFind is the FediBoard-operated open-web discovery index. The plugin contacts fedifind.com only when an administrator takes one of the following actions:</p>
<ul>
<li>Submits an article to FediFind Discoveries — sends the article URL, title and hashtags, along with the administrator’s FediFind licence key.</li>
<li>Registers or validates a FediFind account from the FediStation settings page — sends the administrator’s email address and the validation code returned by FediFind.</li>
<li>Loads the panel preview card or boost form — calls FediFind’s OG-fetch endpoint (<code>/api/og-fetch</code>) with the article URL so that the article’s image, title and description can be displayed in a unified way across all FediBoard tools.</li>
</ul>
<p>No data is sent for non-administrator visitors.</p>
<p>Terms & Privacy: https://fediboard.com/legal#fedifind</p>
<h3>Privacy</h3>
<p>FediStation is designed to respect your readers’ privacy by default.</p>
<ul>
<li><strong>No frontend Google Fonts</strong> — the side panel uses your visitors’ system font stack.</li>
<li><strong>No tracking pixels, analytics, or third-party scripts</strong> loaded on the frontend.</li>
<li><strong>Outbound HTTP calls only occur</strong> when an explicit action is taken (share, boost, search, FediFind submission).</li>
<li><strong>Linked FediBoard and FediFind accounts</strong> are stored as WordPress options and removed on plugin uninstall.</li>
</ul>
<h4>Anonymous usage analytics</h4>
<p>To help us understand which features are useful and prioritize development, FediStation sends a small number of <strong>anonymous, aggregate pings</strong> to api.fediboard.com. These pings include:</p>
<ul>
<li>A random UUIDv4 site identifier (generated once on plugin activation, never tied to your domain, email, or any personal info)</li>
<li>The event type: install, share click, search submit, boost, or FediFind submission</li>
<li>For share clicks only: which network (Bluesky, Mastodon, Flipboard, Threads, or Lemmy)</li>
</ul>
<p>That’s it. <strong>No visitor data, no IP, no page URLs, no search queries, no post titles</strong> are ever sent. Pings are fire-and-forget so they never slow down your site.</p>
<p>If you’d prefer to disable analytics entirely, you can do so via WordPress filter:</p>
<pre><code>add_filter( 'fedistation_stats_enabled', '__return_false' );
</code></pre>
<p>(This filter will be honored from version 1.1 onwards.)</p>


FediStation

Bring the Open Social Web to your blog. Share to Mastodon, Bluesky, Flipboard, Threads, and Lemmy. Boost articles to FediBoard topic channels.

Social Publisher vs FediStation