WordPress plugin

Social Slider Feed – Social Media Feed & Gallery Widgets security & vulnerabilities

Q: Does Social Slider Feed – Social Media Feed & Gallery Widgets have known vulnerabilities?

Yes. VulnCrest Radar lists 12 known vulnerabilities in Social Slider Feed – Social Media Feed & Gallery Widgets: 3 high, 9 medium. None are known to affect version null.

Q: How do I check which version of Social Slider Feed – Social Media Feed & Gallery Widgets I run?

In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.

Q: What is the most recent Social Slider Feed – Social Media Feed & Gallery Widgets vulnerability?

CVE-2026-121519, published Nov 6, 2026: Social Slider Feed <= 2.3.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'slidespeed' Parameter. Severity: Medium (CVSS 6.4).

Q: Is any Social Slider Feed – Social Media Feed & Gallery Widgets vulnerability listed in CISA KEV?

No. None of the known Social Slider Feed – Social Media Feed & Gallery Widgets vulnerabilities is currently listed in the CISA KEV catalog.

instagram-slider-widget— active installsLast vulnerability Nov 6, 2026

No known unpatched vulnerabilities in the latest version

All 12 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.

Watch plugin

12Known vulnerabilities

Critical0
High3
Medium9
Low0

Vulnerabilities per year

All Social Slider Feed – Social Media Feed & Gallery Widgets vulnerabilities

Social Slider Feed – Social Media Feed & Gallery Widgets vulnerabilities
Severity	Vulnerability	CVE	Published
Medium6.4	Authenticated (Subscriber+) Stored Cross-Site Scripting via 'slidespeed' Parameter ≤2.3.8Update to 2.3.9	CVE-2026-121519	Nov 06
High7.2	Unauthenticated Stored Cross-Site Scripting ≤2.3.2Update to 2.3.3	CVE-2026-39507	Apr 16
Medium4.4	Authenticated (Administrator+) Stored Cross-Site Scripting ≤2.2.8Update to 2.2.9	CVE-2025-0717	Mar 3, 2025
Medium4.4	Authenticated (Administrator+) Stored Cross-Site Scripting ≤2.2.8Update to 2.2.9	CVE-2024-10149	Feb 25, 2025
Medium4.3	Missing Authorization ≤2.2.2Update to 2.2.5	CVE-2024-43215	Aug 9, 2024
Medium5.5	Authenticated (Admin+) Stored Cross-Site Scripting ≤2.0.6Update to 2.0.7	—	Aug 9, 2022
Medium5.5	Authenticated (Administrator+) Stored Cross-Site Scripting ≤2.0.5Update to 2.0.6	—	Aug 2, 2022
Medium6.1	Reflected Cross-Site Scripting ≤2.0.4Update to 2.0.5	—	Aug 1, 2022
Medium6.4	Authenticated (Scubscriber+) Stored Cross-Site Scripting ≤2.0.4Update to 2.0.5	—	Aug 1, 2022
High7.2	Missing Authorization to Cross-Site Scripting ≤2.0.4Update to 2.0.5	—	Aug 1, 2022
High8.8	Missing Authorization ≤2.0.4Update to 2.0.5	—	Aug 1, 2022
Medium6.1	Reflected Cross-Site Scripting <1.8.5Update to 1.8.5	CVE-2021-24196	Mar 14, 2021

Medium6.4
Authenticated (Subscriber+) Stored Cross-Site Scripting via 'slidespeed' Parameter
≤2.3.8Update to 2.3.9
CVE-2026-121519Nov 06
High7.2
Unauthenticated Stored Cross-Site Scripting
≤2.3.2Update to 2.3.3
CVE-2026-39507Apr 16
Medium4.4
Authenticated (Administrator+) Stored Cross-Site Scripting
≤2.2.8Update to 2.2.9
CVE-2025-0717Mar 3, 2025
Medium4.4
Authenticated (Administrator+) Stored Cross-Site Scripting
≤2.2.8Update to 2.2.9
CVE-2024-10149Feb 25, 2025
Medium4.3
Missing Authorization
≤2.2.2Update to 2.2.5
CVE-2024-43215Aug 9, 2024
Medium5.5
Authenticated (Admin+) Stored Cross-Site Scripting
≤2.0.6Update to 2.0.7
9f699d49-738f-49f0-ab1a-f43645a32c90Aug 9, 2022
Medium5.5
Authenticated (Administrator+) Stored Cross-Site Scripting
≤2.0.5Update to 2.0.6
391d65a7-1675-4eae-b129-a1208cd95669Aug 2, 2022
Medium6.1
Reflected Cross-Site Scripting
≤2.0.4Update to 2.0.5
1b71eae9-9727-49c9-9926-85689286983fAug 1, 2022
Medium6.4
Authenticated (Scubscriber+) Stored Cross-Site Scripting
≤2.0.4Update to 2.0.5
44b2d11d-e876-433e-9e0d-5e9f2b3c0c80Aug 1, 2022
High7.2
Missing Authorization to Cross-Site Scripting
≤2.0.4Update to 2.0.5
1c63eaea-0a0f-412b-9f1a-3091de3a653aAug 1, 2022
High8.8
Missing Authorization
≤2.0.4Update to 2.0.5
e2e2f446-5391-4189-8c9c-3be2459808d0Aug 1, 2022
Medium6.1
Reflected Cross-Site Scripting
<1.8.5Update to 1.8.5
CVE-2021-24196Mar 14, 2021

Social Slider Feed – Social Media Feed & Gallery Widgets: common questions

Does Social Slider Feed – Social Media Feed & Gallery Widgets have known vulnerabilities?

Yes. VulnCrest Radar lists 12 known vulnerabilities in Social Slider Feed – Social Media Feed & Gallery Widgets: 3 high, 9 medium. None are known to affect version null.

How do I check which version of Social Slider Feed – Social Media Feed & Gallery Widgets I run?

In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.

What is the most recent Social Slider Feed – Social Media Feed & Gallery Widgets vulnerability?

CVE-2026-121519, published Nov 6, 2026: Social Slider Feed <= 2.3.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'slidespeed' Parameter. Severity: Medium (CVSS 6.4).

Is any Social Slider Feed – Social Media Feed & Gallery Widgets vulnerability listed in CISA KEV?

No. None of the known Social Slider Feed – Social Media Feed & Gallery Widgets vulnerabilities is currently listed in the CISA KEV catalog.