CVE-2026-110002

Deferred Deferred - Pending Action

Arbitrary File Upload in Snazzy Social Media Feed WordPress Plugin

Publication date: 2026-10-14

Last updated on: 2026-10-15

Assigner: Wordfence

Description

The Snazzy Social Media Feed plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.5 via the (file scope) function. This is due to missing WordPress bootstrap, authentication, capability, and nonce checks in the standalone save-to-cache.php script, combined with insufficient sanitization of the pluginURL parameter before it is written to a web-executable PHP file. This makes it possible for authenticated attackers, with subscriber-level access and above, to upload files that may be executable, which makes remote code execution possible. The save-to-cache.php script is directly reachable without loading WordPress; FILTER_SANITIZE_URL — the only filter applied to the pluginURL value — preserves the characters required to craft a valid PHP payload, which is then written verbatim into cached-content/cached-feed.php and immediately executable via a single GET request.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-14

Last Modified

2026-10-15

Generated

2026-10-19

AI Q&A

2026-10-14

EPSS Evaluated

2026-10-18

NVD

CVE-2026-110002

EUVD

EUVD-2026-100775

Affected Vendors & Products

Vendor	Product	Version / Range
snazzyplugins	Snazzy	Social Media Feed 0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-434	The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.

Attack-Flow Graph

Executive Summary

The Snazzy Social Media Feed WordPress plugin has an arbitrary file upload vulnerability in versions up to 2.5. It stems from a standalone script save-to-cache.php that lacks proper WordPress security checks like authentication and capability verification. Attackers with subscriber-level access can exploit this to upload executable PHP files by manipulating the pluginURL parameter. The script writes these files to cached-content/cached-feed.php, which can then be executed remotely via a simple GET request.

Detection Guidance

Check for the presence of the save-to-cache.php file in the Snazzy Social Media Feed plugin directory. Look for unexpected PHP files in the cached-content folder. Use commands like 'find /path/to/wordpress -name save-to-cache.php' or 'ls -la /path/to/wordpress/wp-content/plugins/snazzy-social-media-feed/cached-content/' to inspect files.

Impact Analysis

This vulnerability allows authenticated attackers with minimal access (subscriber-level) to upload and execute malicious PHP files on your server. This could lead to complete system compromise, data theft, or further network infiltration. The high CVSS score (9.8) indicates severe impact including confidentiality, integrity, and availability breaches.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating GDPR's data protection requirements and HIPAA's security rules for protected health information. A successful exploit may result in data breaches that trigger mandatory breach notifications and potential regulatory fines under these standards.

Mitigation Strategies

Immediately update the Snazzy Social Media Feed plugin to the latest version if available. If not, consider disabling or removing the plugin until a patch is released. Review user roles and remove unnecessary subscriber-level access. Monitor for unauthorized PHP files in web directories.

Hi! I’m here to help you understand CVE-2026-110002. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70