plugin

Snazzy Cacheable Facebook Feed Vulnerabilities

1 known security issue reported for the Snazzy Cacheable Facebook Feed WordPress plugin. Most recent disclosed Oct 13, 2026.

1 critical

Running Snazzy Cacheable Facebook Feed on your site? Check whether your installed version is affected.

Scan your site free

Snazzy Social Media Feed <= 2.5 - Unauthenticated Arbitrary File Upload via 'pluginURL' Parameter

critical

The Snazzy Social Media Feed plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.5 via the (file scope) function. This is due to missing WordPress bootstrap, authentication, capability, and nonce checks in the standalone save-to-cache.php script, combined with insufficien...

CVSS:
9.8
(Wordfence)
Affected:
up to 2.5
Fix:
No patched version reported
Disclosed:
Oct 13, 2026

CVE-2026-110002 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database