Skip to content
Noroxi

Smash Balloon Social Photo Feed – Easy Social Feeds Plugin

instagram-feed · plugin

Known security vulnerabilities for Smash Balloon Social Photo Feed – Easy Social Feeds Plugin. Find out in seconds which version runs on your site with WP Lens.

3 known vulnerabilities

latest Aug 5, 2026

Vulnerabilities

  • CVE-2025-4583

    Smash Balloon Instagram Feed <= 6.9.0 (Free) & <= 6.8.0 (Pro) - Authenticated (Contributor+) Stored Cross-Site Scripting via `data-plugin` Attribute

    Medium 5.4

  • CVE-2026-15452

    Smash Balloon Social Photo Feed <= 6.11.3 - Reflected Cross-Site Scripting via REQUEST_URI Query String

    Medium 4.7

  • CVE-2026-12002

    Smash Balloon Social Photo Feed – Easy Social Feeds Plugin <= 6.11.1 - Cross-Site Request Forgery to oEmbed Access Token Overwrite via 'sbi_access_token' Parame

    Medium 4.7

← Back to directory