cleantalk
Vulnerabilities and Security Researches

SnapWidget Social Photo Feed Widget, CVE-2025-58241

CVE, Research URL

CVE-2025-58241

Home page URL

Security reports for SnapWidget Social Photo Feed Widget

Application

SnapWidget Social Photo Feed Widget

Published on
Sep 23, 2025
Research Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in snapwidget SnapWidget Social Photo Feed Widget snapwidget-wp-instagram-widget allows DOM-Based XSS.This issue affects SnapWidget Social Photo Feed Widget: from n/a through <= 1.1.0.
Affected versions
max 1.1.0.
Status
vulnerable
Previous vulnerability researches
WooCommerce Additional Fees On Checkout (Free) (CVE-2024-12395) , Dec 18, 2024
WooCommerce Additional Fees On Checkout (Free) (CVE-2025-57903) , Apr 25, 2026
New vulnerability
Easy Invoice &#8211; Invoice for WordPress, PDF Invoice, Quote for WordPress, WordPress Invoice Plugin (CVE-2025-6324) , Apr 25, 2026
WordPress Plugin for Google Maps &#8211; WP MAPS (CVE-2025-3504) , Apr 25, 2026
Restrict User Registration (CVE-2025-9892) , Apr 25, 2026
SnapWidget Social Photo Feed Widget (CVE-2025-58241) , Apr 25, 2026
Cozy Blocks &#8211; Page Builder Blocks for FSE and Gutenberg Editor, Gutenberg Blocks, WooCommerce Blocks, Post Blocks, Slider (CVE-2025-59573) , Apr 25, 2026