WordPress plugin
Spotlight Social Feeds – Block, Shortcode, and Widget (Premium) security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 1 known vulnerability is fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High0
- Medium1
- Low0
All Spotlight Social Feeds – Block, Shortcode, and Widget (Premium) vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium5.3 | Social Media Feeds (Premium) <= 1.7.1 - Unauthenticated Information Exposure ≤1.7.1Update to 1.7.2 | CVE-2025-39498 |
- Medium5.3Social Media Feeds (Premium) <= 1.7.1 - Unauthenticated Information Exposure
≤1.7.1Update to 1.7.2
Spotlight Social Feeds – Block, Shortcode, and Widget (Premium): common questions
Does Spotlight Social Feeds – Block, Shortcode, and Widget (Premium) have known vulnerabilities?
Yes. VulnCrest Radar lists 1 known vulnerability in Spotlight Social Feeds – Block, Shortcode, and Widget (Premium): 1 medium. None are known to affect version null.
How do I check which version of Spotlight Social Feeds – Block, Shortcode, and Widget (Premium) I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Spotlight Social Feeds – Block, Shortcode, and Widget (Premium) vulnerability?
CVE-2025-39498, published May 16, 2025: Spotlight - Social Media Feeds (Premium) <= 1.7.1 - Unauthenticated Information Exposure. Severity: Medium (CVSS 5.3).
Is any Spotlight Social Feeds – Block, Shortcode, and Widget (Premium) vulnerability listed in CISA KEV?
No. None of the known Spotlight Social Feeds – Block, Shortcode, and Widget (Premium) vulnerabilities is currently listed in the CISA KEV catalog.