WordPress plugin
Widgets for Social Photo Feed security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 3 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High1
- Medium2
- Low0
All Widgets for Social Photo Feed vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High7.2 | Unauthenticated Stored Cross-Site Scripting via feed_data ≤1.7.9Update to 1.8.0 | CVE-2026-5425 |
- High7.2Unauthenticated Stored Cross-Site Scripting via feed_data
≤1.7.9Update to 1.8.0
Widgets for Social Photo Feed: common questions
Does Widgets for Social Photo Feed have known vulnerabilities?
Yes. VulnCrest Radar lists 3 known vulnerabilities in Widgets for Social Photo Feed: 1 high, 2 medium. None are known to affect version null.
How do I check which version of Widgets for Social Photo Feed I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Widgets for Social Photo Feed vulnerability?
CVE-2025-14726, published May 1, 2026: Widgets for Social Photo Feed <= 1.8 - Missing Authentication to Unauthenticated Plugin Settings Access/Update via trustindex_feed_hook_instagram REST API endpoints. Severity: Medium (CVSS 6.5).
Is any Widgets for Social Photo Feed vulnerability listed in CISA KEV?
No. None of the known Widgets for Social Photo Feed vulnerabilities is currently listed in the CISA KEV catalog.