SnapWidget Social Photo Feed Widget
SnapWidget Social Photo Feed Widget has 2 disclosed vulnerabilities in the WordSec catalog, all reported in 2025; none of them are fixed as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10. 2025 was the busiest year with 2 disclosures.
The most common weakness is Cross-Site Scripting, behind 2 of the records (100%).
None of the 2 issues recorded for SnapWidget Social Photo Feed Widget have a published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.
2 independent researchers contributed these findings, one record each. SnapWidget Social Photo Feed Widget is installed on roughly 600 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 5.6.19.
CVE-2025-58241SnapWidget Social Photo Feed Widget <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Read the full analysisVulnerability Records
SnapWidget Social Photo Feed Widget
Author
snapwidget
SnapWidget Social Photo Feed Widget is an easy way to embed your Instagram photos and videos on your website or blog to display your photos. The widget offers the same functionality and customization available for widgets embedded from SnapWidget. Supports the Instagram Basic Display and Graph API’s. Features Simple and easy to use Multiple layout options (Grid, Board, Scrolling, Slideshow and Map) Secure, supports HTTPS websites Refreshes with new photos every 15 minutes (5 minutes for Pro widgets) Pro Features Hashtag Widgets Widget Analytics Shoppable features Add your own custom CSS Display photos in a lightbox Previous / Next buttons to display older content Creating widgets for other users
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C