snazzy_social_media_feed vulnerabilities

CVEs whose affected-version data names the snazzy_social_media_feed package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-110002Critical· 9.8

3w ago

The Snazzy Social Media Feed plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.5 via the (file scope) function

The Snazzy Social Media Feed plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.5 via the (file scope) function. This is due to missing WordPress bootstrap, authentication, capability, and…

▾ Midnightsnazzyplugins · Snazzy Social Media FeedEPSS 0.95%via NVD