Maira Foresto

Social Publisher helps you publish WordPress content to multiple social networks from one place inside your dashboard.
Connect your accounts, choose where each post should be shared, customize the message, attach an image, and publish without jumping between platforms.
Designed for a simple workflow, Social Publisher supports manual publishing from its main screen and auto-post options from the WordPress editor.
<h4>Main features</h4>
<ul>
<li>Publish to multiple social networks from one dashboard</li>
<li>Connect and manage accounts in one place</li>
<li>Write a custom message before publishing</li>
<li>Use the built-in image cropper before posting</li>
<li>Trigger auto-post options from the Gutenberg editor</li>
<li>Disconnect accounts and restart a connection from zero when needed</li>
<li>Review debug logs when troubleshooting a connection or publish attempt</li>
</ul>
<h4>Supported networks</h4>
Social Publisher currently supports:
<ul>
<li>Bluesky</li>
<li>Mastodon</li>
<li>Tumblr</li>
<li>Pinterest</li>
<li>Threads</li>
<li>Instagram</li>
<li>LinkedIn</li>
<li>Blogger</li>
<li>Telegram</li>
<li>Facebook Pages</li>
</ul>
Support for some networks may depend on the account type, app approval status, or provider requirements.
<h4>Who is this plugin for?</h4>
Social Publisher is a good fit for:
<ul>
<li>bloggers who want a simpler social publishing workflow</li>
<li>site owners who publish to more than one network</li>
<li>content creators who want to manage sharing from WordPress</li>
<li>admins who want account connections and publishing tools in one place</li>
</ul>
<h3>External services</h3>
Social Publisher connects to external services only when a site administrator enables a provider, starts an authorization flow, tests a connection, opens a share action, or publishes content to that provider.
The plugin stores the credentials returned by each provider in the WordPress database for the current site. It uses those credentials only to validate the connection and publish content chosen by the administrator. Debug logs are sanitized to avoid storing access tokens or OAuth secrets in clear text.
No data is sent to a social network unless that specific integration is configured and used.
<h4>Bluesky</h4>
Service provider: Bluesky Social, PBC.
Domains/endpoints used: https://bsky.social/xrpc/
What it is used for: authenticating with a Bluesky handle and app password, uploading images, and creating Bluesky posts.
Data sent and when: when the administrator saves or tests the Bluesky connection, the plugin sends the configured handle and app password to Bluesky. When publishing, it sends the post text, link, optional image data, and the authenticated account identifier to Bluesky.
Terms: https://bsky.social/about/support/tos 
Privacy policy: https://bsky.social/about/support/privacy-policy
<h4>Mastodon</h4>
Service provider: the Mastodon server/instance selected by the site administrator. Mastodon is federated, so the exact provider, terms, and privacy policy depend on the selected instance.
Domains/endpoints used: the plugin connects over HTTPS to the administrator-selected Mastodon instance. Example endpoints include https://mastodon.social/api/v1/accounts/verify_credentials, https://mastodon.social/api/v1/statuses, https://mastodon.social/api/v1/media, and https://mastodon.social/api/v1/apps. The domain changes when the administrator enters a different instance.
What it is used for: registering or connecting an app on the selected Mastodon instance, validating the account, uploading media, checking uploaded media, and publishing statuses.
Data sent and when: when the administrator saves, tests, or connects Mastodon, the plugin sends the selected server name, callback/redirect details, OAuth app data, authorization code, client credentials, and access token to that selected instance. When publishing, it sends the status text, link, optional media files, visibility settings, and account token to that selected instance.
Terms: each Mastodon instance publishes its own terms. Review the selected instance terms before connecting it. Example for mastodon.social: https://mastodon.social/terms 
Privacy policy: each Mastodon instance publishes its own privacy policy. Example for mastodon.social: https://mastodon.social/privacy-policy
<h4>Tumblr</h4>
Service provider: Tumblr.
Domains/endpoints used: https://www.tumblr.com/oauth/ and https://api.tumblr.com/v2/.
What it is used for: OAuth authentication, validating the configured blog, retrieving basic account/blog information, and publishing posts to the selected Tumblr blog.
Data sent and when: during connection, the plugin sends the Consumer Key, Consumer Secret, OAuth verifier, callback URL, token, token secret, and blog identifier to Tumblr. When publishing, it sends the post title/text, link, tags, optional image/media data, and blog identifier.
Terms: https://www.tumblr.com/policy/en/terms-of-service 
Privacy policy: https://www.tumblr.com/privacy/en
<h4>Pinterest</h4>
Service provider: Pinterest.
Domains/endpoints used: https://www.pinterest.com/oauth/, https://api.pinterest.com/v5/, and https://api-sandbox.pinterest.com/v5/ when sandbox mode is selected.
What it is used for: OAuth authentication, validating account access, selecting boards when available, and creating Pins.
Data sent and when: during connection, the plugin sends the configured App ID, App Secret, redirect/callback URL, authorization code, requested scopes, and token data to Pinterest. When publishing, it sends the Pin title/description, destination link, selected board, and optional image URL or media data.
Terms: https://policy.pinterest.com/en/terms-of-service 
Developer/API terms: https://developers.pinterest.com/terms/ 
Privacy policy: https://policy.pinterest.com/en/privacy-policy
<h4>Threads</h4>
Service provider: Meta Platforms, Inc. / Threads.
Domains/endpoints used: https://threads.net/oauth/ and https://graph.threads.net/. Example endpoints include https://graph.threads.net/v1.0/me, https://graph.threads.net/v1.0/{user-id}/threads, and https://graph.threads.net/v1.0/{container-id}/publish.
What it is used for: OAuth authentication, account validation, media container creation, checking media container status, and publishing Threads posts.
Data sent and when: during connection, the plugin sends the configured App ID, App Secret, redirect/callback URL, authorization code, requested scopes, and access token data to Meta/Threads endpoints. When validating or publishing, it sends the post text, link, optional media URL/data, container IDs, account identifier, and access token to Meta/Threads endpoints.
Meta Platform Terms: https://developers.facebook.com/terms/dfc_platform_terms/ 
Threads API documentation: https://developers.facebook.com/docs/threads/ 
Meta Privacy Policy: https://www.facebook.com/privacy/policy/
<h4>Instagram</h4>
Service provider: Meta Platforms, Inc. / Instagram.
Domains/endpoints used: https://www.instagram.com/oauth/, https://api.instagram.com/oauth/, and https://graph.instagram.com/.
What it is used for: OAuth authentication, account validation, media container creation, and publishing Instagram content when the configured account and permissions allow it.
Data sent and when: during connection, the plugin sends the configured Client/App ID, Client/App Secret, redirect/callback URL, authorization code, requested scopes, and token data to Instagram/Meta endpoints. When publishing, it sends the caption/text, link when supported by the provider, optional image/media URL/data, container IDs, and account identifier.
Meta Platform Terms: https://developers.facebook.com/terms/dfc_platform_terms/ 
Meta Privacy Policy: https://www.facebook.com/privacy/policy/
<h4>Facebook Pages</h4>
Service provider: Meta Platforms, Inc. / Facebook.
Domains/endpoints used: https://www.facebook.com/v20.0/dialog/oauth and https://graph.facebook.com/v20.0/.
What it is used for: OAuth authentication, retrieving available Pages for the authorized account, storing the selected Page token, and publishing to Facebook Pages. The plugin can also open Facebook’s public share dialog when the administrator uses the Facebook share action.
Data sent and when: during connection, the plugin sends the configured App ID, App Secret, redirect/callback URL, authorization code, requested scopes, and token data to Facebook/Meta endpoints. When loading available Pages, it sends the account token and receives Page identifiers and Page names. When publishing, it sends the selected Page ID/token, post message, link, and optional image/media data. When using the public share action, it opens a Facebook URL containing the page URL to share.
Meta Platform Terms: https://developers.facebook.com/terms/dfc_platform_terms/ 
Meta Privacy Policy: https://www.facebook.com/privacy/policy/
<h4>LinkedIn</h4>
Service provider: LinkedIn.
Domains/endpoints used: https://www.linkedin.com/oauth/v2/ and https://api.linkedin.com/.
What it is used for: OAuth authentication, retrieving basic member/profile information when available, validating the configured person or organization URN, initializing image uploads, uploading images, and publishing posts.
Data sent and when: during connection, the plugin sends the configured Client ID, Client Secret, redirect/callback URL, authorization code, requested scopes, and token data to LinkedIn. When validating or publishing, it sends the person/organization URN, post text, link, optional image data, upload URL data, and access token.
User Agreement: https://www.linkedin.com/legal/user-agreement 
API Terms of Use: https://legal.linkedin.com/api-terms-of-use 
Privacy policy: https://www.linkedin.com/legal/privacy-policy
<h4>Blogger / Google</h4>
Service provider: Google / Blogger.
Domains/endpoints used: https://accounts.google.com/o/oauth2/v2/auth, https://oauth2.googleapis.com/token, and https://www.googleapis.com/blogger/v3/.
What it is used for: OAuth authentication, selecting the destination Blogger blog, reading basic blog information, refreshing tokens when needed, and publishing Blogger posts.
Data sent and when: during connection, the plugin sends the configured Client ID, Client Secret, redirect/callback URL, authorization code, requested Blogger scopes, refresh token, and access token data to Google. When selecting or publishing to a blog, it sends the blog ID, post title/content, labels when used, and token data to the Blogger API.
Google APIs Terms of Service: https://developers.google.com/terms 
Google Terms of Service: https://policies.google.com/terms 
Google Privacy Policy: https://policies.google.com/privacy
<h4>Telegram</h4>
Service provider: Telegram Messenger Inc. / Telegram Bot API.
Domains/endpoints used: https://api.telegram.org/. Example methods include getMe, getChat, sendMessage, and sendPhoto.
What it is used for: validating the configured bot token and chat destination, then publishing posts to the selected Telegram group, supergroup, channel, or forum topic.
Data sent and when: when the administrator saves or tests Telegram, the plugin sends the Bot Token and configured chat ID to Telegram Bot API endpoints to validate the connection. When publishing, it sends the post title/text, link, hashtags, optional image URL, optional topic/thread ID, and the destination chat ID.
Terms: https://telegram.org/tos 
Bot API documentation: https://core.telegram.org/bots/api 
Privacy policy: https://telegram.org/privacy
<h4>Flipboard</h4>
Service provider: Flipboard.
Domains/endpoints used: https://share.flipboard.com/.
What it is used for: opening Flipboard’s public share window when the administrator uses the Flipboard share action.
Data sent and when: when the administrator uses the Flipboard share action, the plugin opens a Flipboard URL containing the public page URL to share. The plugin does not store Flipboard credentials.
Terms: https://about.flipboard.com/terms-of-service/ 
Privacy policy: https://about.flipboard.com/privacy-policy/

Social Publisher

Publish WordPress posts to multiple social networks from one simple dashboard.

Joost

PostCaster publishes WordPress posts to Bluesky and Mastodon when a post goes live. It supports both site-wide accounts and personal author accounts, with previews, test posts, and per-post overrides on the post edit screen.
This plugin is intended for editorial sites that want social posting to stay close to the WordPress publishing workflow.
Key capabilities:
<ul>
<li>Publish automatically when a post moves from unpublished to <code>publish</code></li>
<li>Use site-wide accounts in <code>PostCaster > Global socials</code></li>
<li>Let authors use their own accounts in <code>PostCaster > My socials</code></li>
<li>Preview the exact text before publishing</li>
<li>Override the text per article</li>
<li>Choose featured-image behavior per network</li>
<li>Re-publish manually from the post edit screen when needed</li>
</ul>
Quick start:
<ol>
<li>Activate the plugin.</li>
<li>Enable PostCaster in <code>PostCaster > Settings</code>.</li>
<li>Choose which post types may be published automatically.</li>
<li>Configure one or more site-wide accounts in <code>PostCaster > Global socials</code>.</li>
<li>Send a test post for each configured network.</li>
<li>Publish a test article and confirm the result on the target network.</li>
</ol>
Supported networks:
<ul>
<li>Bluesky</li>
<li>
Mastodon 
Permissions and publishing model:
</li>
<li>
Editors and administrators can publish through configured global accounts.
</li>
<li>Authors can publish through their own personal accounts when personal publishing is enabled for them.</li>
<li>A user who has access to both global and personal targets can choose which targets to use during manual publishing.</li>
<li>If Co-Authors Plus is active, linked co-authors are also recognized for personal publishing.</li>
</ul>
Templates and previews:
<ul>
<li>The default message template is based on post title and URL.</li>
<li>You can set a general template, network-specific templates, and post-specific overrides.</li>
<li>The post edit screen shows previews for the currently available publish targets.</li>
<li>If the final message is still too long for a network, PostCaster skips that target and stores an error on the article.</li>
</ul>
For template details and examples, see <code>docs/templates.md</code> in the plugin repository.
Troubleshooting highlights:
<ul>
<li>Always use the built-in test-post buttons after changing credentials.</li>
<li>If a network is enabled but not posting, first check credentials and article-level errors.</li>
<li>If encrypted credentials can no longer be read, re-save them in <code>Global socials</code> or <code>My socials</code>.</li>
<li>Publishing runs through Action Scheduler in the background; low-traffic sites still benefit from a real server cron job or scheduled task for reliable timing.</li>
</ul>
External services:
PostCaster connects to external social networks only after an administrator or user explicitly configures that network and saves the required credentials.
When configured, PostCaster may send:
<ul>
<li>text rendered from post fields and templates</li>
<li>featured image bytes and alt text</li>
<li>the configured account identifiers required by that network</li>
</ul>
Relevant service documentation and terms:
<ul>
<li>Bluesky developer docs: https://docs.bsky.app/</li>
<li>Bluesky terms: https://bsky.social/about/support/tos</li>
<li>Mastodon API docs: https://docs.joinmastodon.org/api/ 
Privacy note:</li>
</ul>
PostCaster does not send usage analytics or telemetry to the plugin author. Network requests are only made to the configured social networks for test posts and actual publishing.

PostCaster

Publishes WordPress posts with featured images to Bluesky and Mastodon.

Social Publisher vs PostCaster