Proof Factor – Social Proof Notifications
Proof Factor – Social Proof Notifications has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 4.4, and the most serious one scores 4.4 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for Proof Factor – Social Proof Notifications has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.
All of these findings were reported by Vinit Lakra. Proof Factor – Social Proof Notifications is installed on roughly 100 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 5.1.24.
CVE-2025-58658Proof Factor – Social Proof Notifications <= 1.0.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Read the full analysisVulnerability Records

Proof Factor – Social Proof Notifications
Author
Proof Factor LLC
Proof Factor displays recent user sign ups! Who trusts an empty restaurant? Same goes for your online business. Proof Factor turns your website into a busy and interesting place that compels buyer action. Using Proof Factor can increase your leads and sales by 10% in less than 10 minutes!. Here’s why: Highly customizable: Site owners can position Proof Factor in any corner (bottom left, bottom right, top left, top right) – whatever works best for your site! FAST. Proof Factor is lightweight and built to scale, so it won’t slow down your site (which can hurt your Google rankings) Works on mobile! Choose how your notifications are displayed on mobile, or turn them off for mobile devices Hide Proof Factor from specific pages New site? No worries – you can loop notifications! Customize the message, style, position and timing to suit your branding.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C