Snow Storm

Snow Storm has 2 disclosed vulnerabilities in the WordSec catalog, all reported in 2025; all 2 are fixed as of September 2026. Their average CVSS score is 5.3, and the most serious one scores 6.1 out of 10. 2025 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Scripting, behind 2 of the records (100%).

Every one of the 2 issues recorded for Snow Storm has a vendor fix available, so running the current release closes all known holes.

All of these findings were reported by Skalucy. Snow Storm is installed on roughly 300 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.7.7.

Strategic Overview

Avg CVSSMedium

5.3/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Snow Storm vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.1CVE-2025-30858

Snow Storm <= 1.4.6 - Reflected Cross-Site Scripting

Read the full analysis

Vulnerability Records

2 records


2025-04-02 00:00	Snow Storm <= 1.4.6 - Reflected Cross-Site Scripting Snow Storm <= 1.4.6	`CVE-2025-30858`	6.1 Medium	Skalucy	Yes
2025-03-18 00:00	Snow Storm <= 1.4.6 - Authenticated (Administrator+) Stored Cross-Site Scripting Snow Storm <= 1.4.6	`N/A`	4.4 Medium	Anonymous	Yes

Showing 1–2 of 2 reports

Latestv1.4.7

Snow Storm

Author

Tribulant Software

4.6(49)

92/100

Last Updated

2025-03-14 (2y ago)

Active Installs

300+

Downloads

113,630

Requires WP

3.0+

Requires PHP

Tested up to

WP 6.7.7

Created

2010-12-03 (16y ago)

Display falling snow flakes on the front of your WordPress website for a festive presentation. Useful Links: Online Documentation Live Demonstration of Snow Storm plugin Get Support for Snow Storm plugin The Snow Storm plugin was developed by Tribulant Software so that WordPress website owners can display falling snow during the festive season eg. Christmas to decorate their website.

View on WordPress.org