CVE-2025-30610

Summary

CVE-2025-30610 is a Cross-site Scripting (XSS) vulnerability affecting WP Social Widget, a popular plugin used for adding social media icons to WordPress websites. The flaw, which allows for Stored XSS, is caused by improper neutralization of user inputs during web page generation. Attackers can exploit this vulnerability to inject malicious scripts into a targeted website, potentially stealing user data or taking control of user sessions. Affected versions of WP Social Widget range from n/a to 2.2.6. Users are strongly advised to update to the latest version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.