Vendor

catchsquare

5 known vulnerabilities.

Products

WP Social Widget 4 WP Smart Preloader 1

All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

Medium 6.5

CVE-2025-57981

WordPress WP Social Widget Plugin <= 2.3.1 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in catchsquare WP Social Widget wp-social-widget allows Stored XSS.This issue affects WP Social Widget: from n/a through <= 2.3.1.

catchsquare WP Social Widget

Sep 22, 2025
Medium 6.5

CVE-2025-49306

WordPress WP Social Widget plugin <= 2.3 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in catchsquare WP Social Widget wp-social-widget allows Stored XSS.This issue affects WP Social Widget: from n/a through <= 2.3.

catchsquare WP Social Widget

Jun 6, 2025
Medium 6.5

CVE-2025-30610

WordPress WP Social Widget plugin <= 2.2.7 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in catchsquare WP Social Widget wp-social-widget allows Stored XSS.This issue affects WP Social Widget: from n/a through <= 2.2.7.

catchsquare WP Social Widget

Mar 24, 2025
Medium 6.5

CVE-2024-27189

WordPress WP Social Widget plugin <= 2.2.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in catchsquare WP Social Widget allows Stored XSS.This issue affects WP Social Widget: from n/a through 2.2.5.

catchsquare WP Social Widget

Mar 15, 2024
Medium 5.9

CVE-2023-23675

WordPress WP Smart Preloader Plugin <= 1.15 is vulnerable to Cross Site Scripting (XSS)

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Catchsquare WP Smart Preloader plugin <= 1.15 versions.

catchsquare WP Smart Preloader

Mar 30, 2023