snazzyplugins Snazzy Social Media Feed Plugin up to 2.5 on WordPress save-to-cache.php pluginURL unrestricted upload

Summaryinfo

A vulnerability was found in snazzyplugins Snazzy Social Media Feed Plugin up to 2.5. It has been classified as critical. This issue affects some unknown processing of the file save-to-cache.php. Performing a manipulation of the argument pluginURL results in unrestricted upload. This vulnerability was named CVE-2026-110002. The attack may be initiated remotely. There is no available exploit.

Detailsinfo

A vulnerability was found in snazzyplugins Snazzy Social Media Feed Plugin up to 2.5. It has been classified as critical. This affects an unknown code block of the file save-to-cache.php. The manipulation of the argument pluginURL with an unknown input leads to a unrestricted upload vulnerability. CWE is classifying the issue as CWE-434. The product allows the attacker to upload or transfer files of dangerous types that can be automatically processed within the product's environment. This is going to have an impact on confidentiality, integrity, and availability. The summary by CVE is:

The Snazzy Social Media Feed plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.5 via the (file scope) function. This is due to missing WordPress bootstrap, authentication, capability, and nonce checks in the standalone save-to-cache.php script, combined with insufficient sanitization of the pluginURL parameter before it is written to a web-executable PHP file. This makes it possible for authenticated attackers, with subscriber-level access and above, to upload files that may be executable, which makes remote code execution possible. The save-to-cache.php script is directly reachable without loading WordPress; FILTER_SANITIZE_URL — the only filter applied to the pluginURL value — preserves the characters required to craft a valid PHP payload, which is then written verbatim into cached-content/cached-feed.php and immediately executable via a single GET request.

It is possible to read the advisory at wordfence.com. This vulnerability is uniquely identified as CVE-2026-110002 since 10/13/2026. The exploitability is told to be easy. It is possible to initiate the attack remotely. Technical details of the vulnerability are known, but there is no available exploit. The pricing for an exploit might be around USD $0-$5k at the moment (estimation calculated on 10/14/2026). The attack technique deployed by this issue is T1608.002 according to MITRE ATT&CK.

By approaching the search of inurl:save-to-cache.php it is possible to find vulnerable targets with Google Hacking.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Be aware that VulDB is the high quality source for vulnerability data.

Productinfo

Type

• WordPress Plugin

Vendor

• snazzyplugins

Name

• Snazzy Social Media Feed Plugin

Version

• 2.0
• 2.1
• 2.2
• 2.3
• 2.4
• 2.5

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion