Vulnerabilities / Smash Balloon Social Post Feed
Smash Balloon Social Post Feed vulnerabilities
Advisories WPSec published for Smash Balloon Social Post Feed – Simple Social Feeds for WordPress. Other sources may list more. Its attack surface: Smash Balloon Social Post Feed on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-01 | WPSEC-2026-0011 | Smash Balloon Social Post Feed <= 4.13.0 - Unauthenticated Stored Cross-Site Scripting via Facebook Post Content in Feed Builder Preview | High 7.2 | 4.14.0 |
License: CC BY 4.0