PatchTheCVE: catchsquarehttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2025-57981: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in catchsquhttps://patchthecve.com/cve/CVE-2025-57981.htmlhttps://patchthecve.com/cve/CVE-2025-57981.htmlWed, 30 Sep 2026 23:10:00 +0000MEDIUM 6.5: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in catchsquare WP Social Widget wp-social-widget allows Stored XSS.This issue affects WP Social Widget: from n/a through <= 2.3.1.CVE-2025-49306: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in catchsquhttps://patchthecve.com/cve/CVE-2025-49306.htmlhttps://patchthecve.com/cve/CVE-2025-49306.htmlWed, 17 Jun 2026 09:31:04 +0000MEDIUM 6.5: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in catchsquare WP Social Widget wp-social-widget allows Stored XSS.This issue affects WP Social Widget: from n/a through <= 2.3.CVE-2025-30610: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in catchsquhttps://patchthecve.com/cve/CVE-2025-30610.htmlhttps://patchthecve.com/cve/CVE-2025-30610.htmlWed, 17 Jun 2026 09:09:01 +0000MEDIUM 6.5: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in catchsquare WP Social Widget wp-social-widget allows Stored XSS.This issue affects WP Social Widget: from n/a through <= 2.2.7.