GCVE - cpe:2.3:a:catchsquare:wp_social_widget:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:catchsquare:wp_social_widget:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Catchsquare (`f02dfa1f-700c-520d-9233-3afdeae6b3c9`)
Product	Wp Social Widget (`459a814f-3c3e-5794-8fb5-9489b7fdf9ca`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/wpplugins/wp-social-widget`	purl2cpe	2026-06-01 10:11:49.825167

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-57981`	vulnerable	2026-06-08 07:35:16.776134	WordPress WP Social Widget Plugin <= 2.3.1 - Cross Site Scripting (XSS) Vulnerability MEDIUM (6.5) Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in catchsquare WP Social Widget wp-social-widget allows Stored XSS.This issue affects WP Social Widget: from n/a through <= 2.3.1. Published: 2025-09-22T18:24:29.794Z Updated: 2026-04-28T16:13:39.873Z Open on db.gcve.eu Reference links https://patchstack.com/database/Wordpress/Plugin/wp-social-widget/vulnerability/wordpress-wp-social-widget-plugin-2-3-1-cross-site-scripting-xss-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-49306`	vulnerable	2026-06-08 07:29:12.893567	WordPress WP Social Widget plugin <= 2.3 - Cross Site Scripting (XSS) Vulnerability MEDIUM (6.5) Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in catchsquare WP Social Widget wp-social-widget allows Stored XSS.This issue affects WP Social Widget: from n/a through <= 2.3. Published: 2025-06-06T12:53:48.782Z Updated: 2026-04-28T16:13:00.786Z Open on db.gcve.eu Reference links https://patchstack.com/database/Wordpress/Plugin/wp-social-widget/vulnerability/wordpress-wp-social-widget-2-3-cross-site-scripting-xss-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-30610`	vulnerable	2026-06-08 07:17:00.724054	WordPress WP Social Widget plugin <= 2.2.7 - Cross Site Scripting (XSS) Vulnerability MEDIUM (6.5) Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in catchsquare WP Social Widget wp-social-widget allows Stored XSS.This issue affects WP Social Widget: from n/a through <= 2.2.7. Published: 2025-03-24T13:47:28.086Z Updated: 2026-04-28T16:11:55.505Z Open on db.gcve.eu Reference links https://patchstack.com/database/Wordpress/Plugin/wp-social-widget/vulnerability/wordpress-wp-social-widget-2-2-6-cross-site-scripting-xss-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-27189`	vulnerable	2026-06-08 06:31:28.130202	WordPress WP Social Widget plugin <= 2.2.5 - Cross Site Scripting (XSS) vulnerability MEDIUM (6.5) Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in catchsquare WP Social Widget allows Stored XSS.This issue affects WP Social Widget: from n/a through 2.2.5. Published: 2024-03-15T12:52:31.918Z Updated: 2026-04-28T16:09:14.113Z Open on db.gcve.eu Reference links https://patchstack.com/database/vulnerability/wp-social-widget/wordpress-wp-social-widget-plugin-2-2-5-cross-site-scripting-xss-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.