What’s Vulnerable › Products

Smash Balloon Social Post Feed vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.

Check whether your Smash Balloon Social Post Feed version is affected

Latest Smash Balloon Social Post Feed vulnerabilities

• CVE-2024-31379 — WordPress Smash Balloon Social Post Feed plugin <= 4.2.1 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3)
• CVE-2022-4477 — Smash Balloon Social Post Feed < 4.1.6 - Contributor+ Stored XSS (CVSS 5.4)
• CVE-2021-25065 — Smash Balloon Social Post Feed < 4.1.1 - Authenticated Reflected Cross-Site Scripting (XSS) (CVSS 5.4)
• CVE-2021-24918 — Smash Balloon Social Post Feed < 4.0.1 - Subscriber+ Arbitrary Plugin Settings Update to Stored XSS (CVSS 5.4)
• CVE-2021-24508 — Smash Balloon Social Post Feed < 2.19.2 - Unauthenticated Stored XSS (CVSS 6.1)