Skip to content
Noroxi

Smash Balloon Social Post Feed

custom-facebook-feed · plugin

Known security vulnerabilities for Smash Balloon Social Post Feed. Find out in seconds which version runs on your site with WP Lens.

4 known vulnerabilities

latest Aug 16, 2026

Vulnerabilities

  • CVE-2026-16775

    Smash Balloon Social Post Feed <= 4.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'id' Shortcode Attribute

    Medium 6.4

  • CVE-2025-4577

    Smash Balloon Custom Facebook Feed <= 4.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via `data-color` Attribute

    Medium 5.4

  • CVE-2025-49937

    WordPress Smash Balloon Social Post Feed plugin <= 4.3.2 - Broken Access Control vulnerability

    Medium 4.3

  • CVE-2024-31379

    WordPress Smash Balloon Social Post Feed plugin <= 4.2.1 - Cross Site Request Forgery (CSRF) vulnerability

    Medium 4.3

← Back to directory