Vendor

https://profiles.wordpress.org/smub/

1 known vulnerabilities.

Products

Smash Balloon Instagram Feed Pro 1

All Critical High Medium Low Exploited only

1 result · Feed

Medium 5.4

CVE-2025-4583

Smash Balloon Instagram Feed <= 6.9.0 (Free) & <= 6.8.0 (Pro) - Authenticated (Contributor+) Stored Cross-Site Scripting via `data-plugin` Attribute

The Smash Balloon Social Photo Feed – Easy Social Feeds Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `data-plugin` attribute in all versions up to, and including, 6.9.0 (Free) and 6.8.0 (Pro) due to insufficient input sanit…

smub https://profiles.wordpress.org/smub/ Smash Balloon Social Photo Feed – Easy Social Feeds Plugin Smash Balloon Instagram Feed Pro Web / CMS

May 29, 2025