Vulnerabilities

TI-2026-82597 CVE-2026-118080 · GHSA-9ppg-x9mq-65q2

PHP object injection in WordPress Social Snap plugin

MEDIUM 40

Contributor PHP Object Injection in Social Snap <= 1.5.4 versions.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00374 Published 2026-10-29 No fix listed CWE-502

TI-2024-12656 CVE-2024-13615 · GHSA-qxjq-4v6j-7ff6

Social Media Plugin by Social Snap <= 1.3.6 - Admin+ Stored XSS

MEDIUM 50

The Social Share Buttons, Social Sharing Icons, Click to Tweet — Social Media Plugin by Social Snap WordPress plugin through 1.3.6 does not sanitise and escape some of its settings, which could allow high privilege users…

CVSS 3.1LOW 3.5 Network High privileges User interaction EPSS 0.00267 Published 2025-03-11 No fix listed CWE-79

TI-2024-21679 CVE-2024-32805 · GHSA-w6fh-8gg6-fggv

WordPress Social Snap plugin <= 1.3.5 - Broken Access Control vulnerability

LOW 35

Missing Authorization vulnerability in Social Snap.This issue affects Social Snap: from n/a through 1.3.5.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00355 Published 2024-06-09 No fix listed CWE-862

Vulnerabilities

Filters

PHP object injection in WordPress Social Snap plugin

Social Media Plugin by Social Snap <= 1.3.6 - Admin+ Stored XSS

WordPress Social Snap plugin <= 1.3.5 - Broken Access Control vulnerability