Plugin icon

Smash Balloon Social Post Feed – Customizable Social Feeds Plugin

custom-facebook-feed

Vulnerabilities:

5

Last Updated:

November 8, 2023

Active Installs:

100000

Published
Title
Fixed in
CVSS
Published
2022-12-20
Title
Smash Balloon Social Post Feed < 4.1.6 - Contributor+ Stored XSS
Fixed in
Fixed in 4.1.6
CVSS
6.8 (medium)
Published
2021-12-16
Title
Smash Balloon Social Post Feed < 4.1.1 - Authenticated Reflected Cross-Site Scripting (XSS)
Fixed in
Fixed in 4.1.1
CVSS
4.8 (medium)
Published
2021-10-29
Title
Smash Balloon Social Post Feed < 4.0.1 - Subscriber+ Arbitrary Plugin Settings Update to Stored XSS
Fixed in
Fixed in 4.0.1
CVSS
7.3 (high)
Published
2021-08-16
Title
Smash Balloon Social Post Feed < 2.19.2 - Unauthenticated Stored XSS
Fixed in
Fixed in 2.19.2
CVSS
9.6 (critical)
Published
2021-07-20
Title
Multiple Plugins from Smash Balloon - Reflected Cross-Site Scripting
Fixed in
Fixed in 2.19.2
CVSS
4.7 (medium)