Cm-wp Social Slider Widget — known CVE vulnerabilities

Every CVE whose affected-product data names Cm-wp Social Slider Widget, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2021-24196 — CVSS 5.4 (medium): The Social Slider Widget WordPress plugin before 1.8.5 allowed Authenticated Reflected XSS in the plugin settings page as the…
• CVE-2024-10149 — CVSS 4.8 (medium): The Social Slider Feed WordPress plugin before 2.2.9 does not sanitise and escape some of its settings, which could allow high privilege…
• CVE-2025-0717 — CVSS 3.5 (low): To exploit the vulnerability, it is necessary: