VYPR

Snazzy Social Media Feed

by WordPress

CVEs (1)

  • CVE-2026-110002CriOct 14, 2026
    risk 0.64cvss 9.8epss —

    The Snazzy Social Media Feed plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.5 via the (file scope) function. This is due to missing WordPress bootstrap, authentication, capability, and nonce checks in the standalone…