Data Modification Vulnerability in WP Social Ninja Plugin for WordPress
CVE-2025-13880
6.5MEDIUM
Key Information:
- Vendor
WordPress
- Vendor
- CVE Published:
- 17 December 2025
What is CVE-2025-13880?
The WP Social Ninja plugin for WordPress is susceptible to unauthorized access and manipulation of sensitive configurations due to inadequate capability verification in its getAdvanceSettings and saveAdvanceSettings methods. This weakness, present in all versions up to and including 4.0.1, can be exploited by unauthenticated threat actors, allowing them to both view and alter the plugin's advanced settings. This poses significant security risks, making it essential for users to secure their installations.
Affected Version(s)
WP Social Ninja – Embed Social Feeds, User Reviews & Chat Widgets * <= 4.0.1