Social Slider Feed – Social Media Feed & Gallery Widgets

Social Slider Feed – Social Media Feed & Gallery Widgets has 11 disclosed vulnerabilities in the WordSec catalog, reported between 2021 and 2026; all 11 are fixed as of October 2026. Their average CVSS score is 6.0, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 3 high. 2022 was the busiest year with 6 disclosures.

The most common weakness is Cross-Site Scripting, behind 9 of the records (82%). Other recurring categories include Cross-Site Request Forgery (CSRF), Missing Authorization.

Every one of the 11 issues recorded for Social Slider Feed – Social Media Feed & Gallery Widgets has a vendor fix available, so running the current release closes all known holes.

6 independent researchers contributed these findings, most of them (5) reported by WPScanTeam.

Strategic Overview

Avg CVSSMedium

6.0/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Social Slider Feed – Social Media Feed & Gallery Widgets vulnerabilities before they are exploited.

Highest severity on recordCVSS 8.8

Social Slider Feed <= 2.0.4 - Missing Authorization

Read the full analysis

Vulnerability Records

11 records


2026-04-16 00:00	Social Slider Feed <= 2.3.2 - Unauthenticated Stored Cross-Site Scripting Social Slider Feed <= 2.3.2	`CVE-2026-39507`	7.2 High	Nguyen Ba Khanh	Yes
2025-03-03 00:00	Social Slider Feed <= 2.2.8 - Authenticated (Administrator+) Stored Cross-Site Scripting Social Slider Feed <= 2.2.8	`CVE-2025-0717`	4.4 Medium	Krugov Artyom	Yes
2025-02-25 00:00	Social Slider Feed <= 2.2.8 - Authenticated (Administrator+) Stored Cross-Site Scripting Social Slider Feed <= 2.2.8	`CVE-2024-10149`	4.4 Medium	Dmitrii Ignatyev	Yes
2024-08-09 00:00	Social Slider Feed <= 2.2.2 - Missing Authorization Social Slider Feed <= 2.2.2	`CVE-2024-43215`	4.3 Medium	Joshua Chan	Yes
2022-08-09 00:00	Social Slider Feed <= 2.0.6 - Authenticated (Admin+) Stored Cross-Site Scripting Social Slider Feed <= 2.0.6	`N/A`	5.5 Medium	WPScanTeam	Yes
2022-08-02 00:00	Social Slider Feed <= 2.0.5 - Authenticated (Administrator+) Stored Cross-Site Scripting Social Slider Feed <= 2.0.5	`N/A`	5.5 Medium	Anonymous	Yes
2022-08-01 00:00	Social Slider Feed <= 2.0.4 - Reflected Cross-Site Scripting Social Slider Feed <= 2.0.4	`N/A`	6.1 Medium	WPScanTeam	Yes
2022-08-01 00:00	Social Slider Feed <= 2.0.4 - Missing Authorization to Cross-Site Scripting Social Slider Feed <= 2.0.4	`N/A`	7.2 High	WPScanTeam	Yes
2022-08-01 00:00	Social Slider Feed <= 2.0.4 - Authenticated (Scubscriber+) Stored Cross-Site Scripting Social Slider Feed <= 2.0.4	`N/A`	6.4 Medium	WPScanTeam	Yes
2022-08-01 00:00	Social Slider Feed <= 2.0.4 - Missing Authorization Social Slider Feed <= 2.0.4	`N/A`	8.8 High	WPScanTeam	Yes

Showing 1–10 of 11 reports