CVE WATCH / VULNERABILITY DETAIL
CVE-2026-110002
CRITICALCVSS 9.8NVD feed
Published 14 October 2026 · tracked since 15 October 2026
Description
The Snazzy Social Media Feed plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.5 via the (file scope) function. This is due to missing WordPress bootstrap, authentication, capability, and nonce checks in the standalone save-to-cache.php script, combi
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-108291 CRITICAL 9.8
- CVE-2026-106599 HIGH 8.8
- CVE-2026-103905 HIGH 7.5
- CVE-2026-104795 HIGH 8.8
- CVE-2026-86476 HIGH 8.4
- CVE-2026-110284 HIGH 7.5
- CVE-2026-104909 HIGH 8.1
- CVE-2026-100163 HIGH 7.4
- CVE-2026-103366 HIGH 7.5
- CVE-2026-103367 HIGH 8.1