CVE-2025-30610mediumCWE-79

CVE-2025-30610: falha de média gravidade em catchsquare WP Social Widget

WordPress WP Social Widget plugin <= 2.2.7 - Cross Site Scripting (XSS) Vulnerability

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar WP Social Widget

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6.5epss 0.3%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in catchsquare WP Social Widget wp-social-widget allows Stored XSS.This issue affects WP Social Widget: from n/a through <= 2.2.7.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L
Produtos afetados
catchsquare · WP Social Widget
CVEs relacionadas — catchsquare WP Social Widget

No mesmo produto, das mais perigosas para as menos.

CVE-2024-27189MEDIUMWordPress WP Social Widget plugin <= 2.2.5 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2025-49306MEDIUMWordPress WP Social Widget plugin <= 2.3 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.3%CVE-2025-57981MEDIUMWordPress WP Social Widget Plugin <= 2.3.1 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%