WDSocialWidgets

WDSocialWidgets has 5 disclosed vulnerabilities in the WordSec catalog, reported between 2014 and 2023; 3 are fixed and 2 remain unpatched as of September 2026. Their average CVSS score is 7.2, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 3 high. 2023 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Scripting, behind 2 of the records (40%). Other recurring categories include SQL Injection, Cross-Site Request Forgery (CSRF).

3 of the records (60%) have a vendor fix, while 2 remain unpatched. The oldest unresolved one dates back to 2023.

4 independent researchers contributed these findings, most of them (2) reported by LEE SE HYOUNG.

Strategic Overview

Avg CVSSHigh

7.2/ 10

Patch Coverage60%

Open

Fixed

Get automatic notifications for all WDSocialWidgets vulnerabilities before they are exploited.

Most severe open issueCVSS 6.1CVE-2023-46090

Spider Facebook <= 1.0.15 - Reflected Cross-Site Scripting

Read the full analysis

Vulnerability Records

5 records


2023-10-25 00:00	Spider Facebook <= 1.0.15 - Cross-Site Request Forgery WDSocialWidgets <= 1.0.15	`CVE-2023-46619`	5.4 Medium	LEE SE HYOUNG	No
2023-10-17 00:00	Spider Facebook <= 1.0.15 - Reflected Cross-Site Scripting WDSocialWidgets <= 1.0.15	`CVE-2023-46090`	6.1 Medium	LEE SE HYOUNG	No
2017-05-02 00:00	WordPress Facebook <= 1.0.13 - SQL Injection WDSocialWidgets <= 1.0.13	`N/A`	8.8 High	Neven Birusk	Yes
2015-01-26 00:00	WDSocialWidgets < 1.0.11 - Cross-Site Scripting WDSocialWidgets < 1.0.11	`CVE-2015-1582`	7.1 High	Kenneth Jepsen	Yes
2014-09-07 00:00	Spider Facebook <= 1.0.8 - SQL Injection WDSocialWidgets <= 1.0.8	`N/A`	8.8 High	Claudio Viviani	Yes

Showing 1–5 of 5 reports