CVE-2025-0717

CVE-2025-0717 affects the WordPress plugin Social Slider Feed until version 2.2.9 (older releases are vulnerable to Admin+ Stored XSS). The issue is triggered in the plugin’s admin context and can be mitigated by upgrading to 2.2.9 or newer (or applying vendor-recommended remediation).

CVE-2021-24196

The CVE-2021-24196 entry concerns the Social Slider Widget WordPress plugin (

CVE-2024-10149

The CVE-2024-10149 entry concerns the WordPress Social Slider Feed plugin prior to version 2.2.9. The root cause is that certain settings are not properly sanitized or escaped, enabling Stored XSS by high‑privilege users (e.g., administrators) even when unfiltered_html is disallowed (such as in m...