Social Media Engine

Social Media Engine has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for Social Media Engine has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.

All of these findings were reported by SOPROBRO. Social Media Engine is installed on roughly 40 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 4.7.35.

Strategic Overview

Avg CVSSMedium

6.4/ 10

Patch Coverage0%

Open

Fixed

Get automatic notifications for all Social Media Engine vulnerabilities before they are exploited.

Most severe open issueCVSS 6.4CVE-2025-22749

Social Media Engine <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records


2025-01-14 00:00	Social Media Engine <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting Social Media Engine <= 1.0.2	`CVE-2025-22749`	6.4 Medium	SOPROBRO	No

Showing 1–1 of 1 reports

Latestv1.0.2

Social Media Engine

Author

ThemesCraft.co

0.0(0)

0/100

Last Updated

2016-11-05 (10y ago)

Active Installs

40+

Downloads

3,888

Requires WP

4.0+

Requires PHP

Tested up to

WP 4.7.35

Created

2016-11-02 (10y ago)

Social follow links shortcode. Built on FontAwesome icons. 30 social networks supported: 500px, behance, bitbucket, delicious, deviantart, digg, dribbble, etsy, facebook, flickr, foursquare, github, google-plus, instagram, lastfm, linkedin, medium, mixcloud, odnoklassniki, quora, reddit, skype, slideshare, soundcloud, spotify, tumblr, twitter, vimeo, vk, wordpress, youtube Usage example This shortcode can be used in posts, pages and widgets areas: [sme_social_links facebook=”follow_link” float=”right” skin=”dark” shape=”circle” size=”medium”] For placement in the php code, use function: do_shortcode(‘[sme_social_links facebook=”follow_link”]’) Shortcode settings Skins light dark Shape circle square Size medium large xlarge Floating right left Supported networks 500px behance bitbucket delicious deviantart digg dribbble etsy facebook flickr foursquare github google-plus instagram lastfm linkedin medium mixcloud odnoklassniki quora skype slideshare soundcloud spotify tumblr twitter vimeo vk wordpress youtube Credits Based on Font Awesome (http://fontawesome.io), font is licensed under SIL OFL 1.1.(http://scripts.sil.org/OFL), css file is licensed under MIT License (http://opensource.org/licenses/mit-license.html)

View on WordPress.org