WP Socio vulnerabilities

🔔 Create alert RSS

Published CVEs affecting WP Socio products: 2 record(s), with severity, exploitation and fixes.

WP Telegram Widget and Join Link 2

Exploited only (KEV) →

CVE-2026-23807 High · 7.1 CWE-79 Mar 25, 2026

WordPress WP Telegram Widget and Join Link plugin <= 2.2.13 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Socio WP Telegram Widget and Join Link wptelegram-widget allows Reflected XSS.This issue affects WP Telegram Widget and Join Link: from n/a through <= 2.2.13.

CVE-2025-68589 Medium · 5.3 CWE-862 Dec 24, 2025

WordPress WP Telegram Widget and Join Link plugin <= 2.2.12 - Broken Access Control vulnerability

Missing Authorization vulnerability in WP Socio WP Telegram Widget and Join Link wptelegram-widget allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Telegram Widget and Join Link: from n/a through <= 2.2.12.