WordPress security changelog
MEDIUM CVE-2026-65521 Deferred

WP Social Ninja: A security weakness

WP Social Ninja is affected by a security weakness. The vulnerable path is reachable without authentication. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is n/a through 4.3.0.

CVE / CNA score 5.3 CVSS 3.1 · audit@patchstack.com
NVD score Pending NVD has not published its own CVSS assessment.
Component
WP Social Ninja
Plugin slug
wp-social-reviews
Affected
n/a through 4.3.0
Safe version
4.3.1
Published
Jul 23, 2026
Weakness
CWE-497 — Exposure of Sensitive System Information to an Unauthorized Control Sphere

This CVE was published Jul 23, 2026 and is one of 4 known issues for this plugin.

What to do

Patch or disable the affected component.

Update WP Social Ninja to 4.3.1 or later, or disable and remove it until a fixed version is available.

Source record

Technical description

Unauthenticated Sensitive Data Exposure in WP Social Ninja <= 4.3.0 versions.

CVE / CNA vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

References

Primary and upstream sources