WordPress Plugin Vulnerabilities

Instagram Feed < 1.6 - Cross-Site Scripting (XSS)

Description

The Smash Balloon Social Photo Feed WordPress plugin was affected by a Cross-Site Scripting (XSS) security vulnerability.

Affects Plugins

Plugin icon
instagram-feed
Fixed in 1.6

References

URL
https://plugins.trac.wordpress.org/changeset/1805420/instagram-feed
URL
http://dumpco.re/blog/xss-instagram-feed

Miscellaneous

Submitter
Chris Atomix
Submitter website
https://www.atomix.com.au
Verified
No
WPVDB ID
36d33de7-655e-40d9-9745-ed2e10836360

Timeline

Publicly Published
2018-01-18 (about 8 years ago)
Added
2018-02-07 (about 8 years ago)
Last Updated
2019-11-01 (about 6 years ago)

Other

Published
Title
Published
2025-07-13
Title
JetEngine < 3.7.1.1 - Contributor+ RCE via Server-Side Template Injection
Published
2014-08-01
Title
Echelon 2.4 - dl-skin.php _mysite_download_skin Parameter Absolute Path Traversal Remote File Download
Published
2023-09-12
Title
MultiVendorX < 4.0.26 - Improper Authorization on REST Routes via 'save_settings_permission'
Published
2014-08-01
Title
Cimy User Manager < 1.4.4 - Arbitrary File Disclosure
Published
2014-08-01
Title
DejaVu 2.4 - dl-skin.php _mysite_download_skin Parameter Absolute Path Traversal Remote File Download