Plugin icon

Widgets for Social Photo Feed

social-photo-feed-widget

Vulnerabilities:

3

Last Updated:

April 23, 2026

Active Installs:

10000

Published
Title
Fixed in
CVSS
Published
2026-05-01
Title
Widgets for Social Photo Feed < 1.8.1 - Missing Authentication to Unauthenticated Plugin Settings Access/Update via trustindex_feed_hook_instagram REST API endpoints
Fixed in
Fixed in 1.8.1
CVSS
6.5 (medium)
Published
2026-04-03
Title
Widgets for Social Photo Feed < 1.8.0 - Unauthenticated Stored Cross-Site Scripting via feed_data
Fixed in
Fixed in 1.8.0
CVSS
7.2 (high)
Published
2025-12-23
Title
Widgets for Social Photo Feed <= 1.7.7 - Missing Authorization
Fixed in
No known fix
CVSS
5.3 (medium)