Meks Smart Social Widget

Meks Smart Social Widget has 4 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2024; all 4 are fixed as of September 2026. Their average CVSS score is 4.6, and the most serious one scores 5.3 out of 10. 2024 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Scripting, behind 2 of the records (50%). Other recurring categories include Cross-Site Request Forgery (CSRF), Missing Authorization.

Every one of the 4 issues recorded for Meks Smart Social Widget has a vendor fix available, so running the current release closes all known holes.

3 independent researchers contributed these findings, one record each. Meks Smart Social Widget is installed on roughly 10,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.6.7.

Strategic Overview

Avg CVSSMedium

4.6/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Meks Smart Social Widget vulnerabilities before they are exploited.

Highest severity on recordCVSS 5.3

Meks Smart Social Widget <= 1.6 - Missing Authorization to notice dimissal

Read the full analysis

Vulnerability Records

4 records


2024-04-26 00:00	Meks Smart Social Widget <= 1.6.4 - Authenticated (Admin+) Stored Cross-Site Scripting Meks Smart Social Widget <= 1.6.4	`CVE-2024-33693`	4.4 Medium	Joshua Chan	Yes
2024-01-26 00:00	Meks Smart Social Widget <= 1.6.3 - Authenticated (Admin+) Stored Cross-Site Scripting Meks Smart Social Widget <= 1.6.3	`CVE-2024-0664`	4.4 Medium	arpeetrathi	Yes
2023-07-27 00:00	Meks Smart Social Widget <= 1.6 - Missing Authorization to notice dimissal Meks Smart Social Widget <= 1.6	`N/A`	5.3 Medium	Anonymous	Yes
2023-07-26 00:00	Meks Smart Social Widget <= 1.6 - Cross-Site Request Forgery via meks_remove_notification Meks Smart Social Widget <= 1.6	`CVE-2023-25989`	4.3 Medium	Muhammad Daffa	Yes

Showing 1–4 of 4 reports

Latestv1.6.5

Meks Smart Social Widget

Author

Meks

4.6(10)

92/100

Last Updated

2024-07-29 (2y ago)

Active Installs

10,000+

Downloads

538,321

Requires WP

3.0+

Requires PHP

Tested up to

WP 6.6.7

Created

2014-01-14 (13y ago)

Choose from different icon shapes and sizes and quickly connect your website with your social profiles. There aare more than 100 social icons provided: Aim, Apple, Behance, Blogger, Cargo, Delicious, DeviantArt, Digg, Dribbble, Envato, Evernote, Facebook, Flickr,Forrst, Github, Google, GooglePlus, GrooveShark, iCloud, Instagram, LastFM, LinkedIN, MySpace, Picasa, Pinterest, ReddIt, Rss, Skype, Soundcloud, Spotify, StumbleUpon, Tumblr, Twitter, Vimeo, Vine, WordPress, Xing, Youtube, Zerply, 500px, vKontakte, Sina Weibo, Tencent Weibo, Me2Day, Twitch… Features Choose from more than 100 social icons Choose from 3 different icon shapes (square, circle or rounded corners) Define custom size for your icons Smart Social Widget plugin is created by Meks Live example? You can see Meks Easy Ads Widget live example on our Gridlove theme demo website Social icons font is made by socicon

View on WordPress.org