Sensitive Data Exposure Vulnerability in RebelCode Spotlight Social Media Feeds
CVE-2025-26758
5.3MEDIUM
Key Information:
- Vendor
WordPress
- Vendor
- CVE Published:
- 17 February 2025
What is CVE-2025-26758?
The RebelCode Spotlight Social Media Feeds plugin has a vulnerability that enables unauthorized users to retrieve sensitive embedded data. This flaw is present in versions from n/a to 1.7.1, potentially exposing sensitive system information to malicious actors. Implementing appropriate security measures and keeping the plugin updated are crucial steps to protect against this issue.
Affected Version(s)
Spotlight Social Media Feeds <= 1.7.1