Meks Easy Photo Feed Widget

Meks Easy Photo Feed Widget has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2021 and 2023; all 2 are fixed as of September 2026. Their average CVSS score is 4.8, and the most serious one scores 5.4 out of 10.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (50%). Other recurring categories include Cross-Site Scripting.

Every one of the 2 issues recorded for Meks Easy Photo Feed Widget has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each. Meks Easy Photo Feed Widget is installed on roughly 10,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.3.10.

Strategic Overview

Avg CVSSMedium

4.8/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Meks Easy Photo Feed Widget vulnerabilities before they are exploited.

Highest severity on recordCVSS 5.4CVE-2021-24958

Meks Easy Photo Feed Widget < 1.2.4 - Authenticated Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

2 records


2023-07-26 00:00	Meks Smart Social Widget <= 1.6 - Cross-Site Request Forgery via meks_remove_notification Meks Easy Photo Feed Widget <= 1.2.7	`CVE-2023-25989`	4.3 Medium	Muhammad Daffa	Yes
2021-11-10 00:00	Meks Easy Photo Feed Widget < 1.2.4 - Authenticated Stored Cross-Site Scripting Meks Easy Photo Feed Widget < 1.2.4	`CVE-2021-24958`	5.4 Medium	Krzysztof Zając	Yes

Showing 1–2 of 2 reports

Latestv1.2.8

Meks Easy Photo Feed Widget

Author

Meks

3.8(12)

76/100

Last Updated

2023-09-11 (3y ago)

Active Installs

10,000+

Downloads

410,903

Requires WP

3.7+

Requires PHP

Tested up to

WP 6.3.10

Created

2017-12-07 (9y ago)

Meks Easy Photo Feed (formerly Instagram) Widget WordPress plugin is made to help you display good looking Instagram photos with a few clicks of the button. Several smart options are provided to fine-tune the widget appearance in order to match your personal taste as well as match any WordPress theme style out of the box. Features Pull Instagram images by username Multiple usernames Choose number of Instagram photos to pull Choose in how many columns you would like to display your Instagram photos Specify spacing between Instagram images Fine-tune widget container size to pull the most optimized Instagram image size and match the current theme layout Automatically display the “Follow me” link Built-in caching (via transients) for optimized performance Shortcode [meks_easy_photo_feed title=”Your Feed Title” username=”your_username” container_size=2000 columns=6 photo_space=5 photos_number=12 link_text=”your_username”] Instagram authorization required since Instagram “Basic Permission” API is now Legacy API Meks Easy Photo Feed Widget plugin is created by Meks

View on WordPress.org