Social Media Widget

Social Media Widget has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2013 and 2024; all 3 are fixed as of October 2026. Their average CVSS score is 6.5, and the most serious one scores 9.8 out of 10. Severity breakdown: 1 critical and 0 high. 2013 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Scripting, behind 1 of the records (33%). Other recurring categories include Externally Controlled Reference To A Resource In Another Sphere, Unrestricted Upload Of File With Dangerous Type.

Every one of the 3 issues recorded for Social Media Widget has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each.

Strategic Overview

Avg CVSSMedium

6.5/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Social Media Widget vulnerabilities before they are exploited.

Highest severity on recordCVSS 9.8CVE-2013-1949

Social Media Widget <= 4.0 - Arbitrary File Upload

Read the full analysis

Vulnerability Records

3 records


2024-06-21 00:00	Social Media Widget <= 4.0.8 - Authenticated (Admin+) Stored Cross-Site Scripting Social Media Widget <= 4.0.8	`CVE-2024-0974`	4.4 Medium	Dmitrii Ignatyev	Yes
2013-04-09 00:00	Social Media Widget 4.0 - Spam Link Injection Social Media Widget 4.0	`N/A`	5.3 Medium	DANIEL CID	Yes
2013-04-08 00:00	Social Media Widget <= 4.0 - Arbitrary File Upload Social Media Widget <= 4.0	`CVE-2013-1949`	9.8 Critical	Anonymous	Yes

Showing 1–3 of 3 reports