Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Vendor: catchsquare Clear all filters
TI-2025-35833 CVE-2025-57981 · GHSA-8xw5-q4cg-g2j3

WordPress WP Social Widget Plugin <= 2.3.1 - Cross Site Scripting (XSS) Vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in catchsquare WP Social Widget wp-social-widget allows Stored XSS.This issue affects WP Social Widget: from n/a through…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00216 Published 2025-09-22 No fix listed CWE-79
TI-2025-31354 CVE-2025-49306 · GHSA-qpx8-vpfc-6qq4

WordPress WP Social Widget plugin <= 2.3 - Cross Site Scripting (XSS) Vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in catchsquare WP Social Widget wp-social-widget allows Stored XSS.This issue affects WP Social Widget: from n/a through…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00271 Published 2025-06-06 No fix listed CWE-79
TI-2025-21885 CVE-2025-30610 · GHSA-g3cr-3jfg-p9mh

WordPress WP Social Widget plugin <= 2.2.7 - Cross Site Scripting (XSS) Vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in catchsquare WP Social Widget wp-social-widget allows Stored XSS.This issue affects WP Social Widget: from n/a through…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.0029 Published 2025-03-24 No fix listed CWE-79
TI-2024-18044 CVE-2024-27189 · GHSA-h3h4-5vcv-376h

WordPress WP Social Widget plugin <= 2.2.5 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in catchsquare WP Social Widget allows Stored XSS.This issue affects WP Social Widget: from n/a through 2.2.5.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00337 Published 2024-03-15 No fix listed CWE-79
TI-2023-00070 CVE-2023-0074 · GHSA-4cfp-2523-96q2

WP Social Widget < 2.2.4 - Contributor+ Stored XSS

Priority MEDIUM 58

The WP Social Widget WordPress plugin before 2.2.4 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the c…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00534 Published 2023-01-30 Fixed in 2.2.4