CVE-2026-118080: WordPress Social Snap plugin <= 1.5.4 - PHP Object Injection vulnerability

WordPress sites using Social Snap version 1.5.4 or earlier are affected.

The vulnerability is described as contributor-level, indicating that exploitation requires contributor access to the affected WordPress site.

Check the installed Social Snap plugin version. Versions 1.5.4 and earlier are affected.

Published Oct 29, 2026

Updated

Contributor PHP Object Injection in Social Snap <= 1.5.4 versions.

Event History

Oct 29, 2026

CVE Published

via MITRE·03:24 PM

Data Sourced