Skip to content
OpenAdvisories

Vendor

snazzyplugins

1 known vulnerabilities.

Products

Snazzy Social Media Feed 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-110002

    Snazzy Social Media Feed <= 2.5 - Unauthenticated Arbitrary File Upload via 'pluginURL' Parameter

    The Snazzy Social Media Feed plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.5 via the (file scope) function. This is due to missing WordPress bootstrap, authentication, capability, and nonce checks in the s…

    snazzyplugins Snazzy Social Media Feed Web / CMS