CVE · Medium
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2025-26758 | Spotlight Social Feeds – Block, Shortcode, and Widget [spotlight-social-photo-feeds] < 1.7.2 | Exposure of Sensitive System Information to an Unauthorized Control Sphere | Medium 5.3 | < 1.7.2 | 1.7.2 | 2025-02-14 | — |
A plugin called Spotlight Social Media Feeds, developed by RebelCode, contains a flaw that lets attackers access sensitive system data they shouldn't be able to see. This weakness is present in versions of the plugin up to and including 1.7.1.
Based on public CVE data (MITRE/NVD).
No signup, no credit card — enter your URL and get a security report in seconds.