Smashballoon vulnerabilities

Products

• Custom Twitter Feeds 5
• Smash Balloon Social Post Feed 4
• Feeds For Youtube 2
• Reviews Feed 2

Newest

• smash balloon custom twitter feeds (tweets widget), smashballoon custom twitter feeds +1 more WordPress Custom Twitter Feeds plugin <= 2.2.3 - Cross Site Request Forgery (CSRF) vulnerability CVE-2024-49685 5.4 MediumOctober 31, 2024
• smashballoon custom twitter feeds Custom Twitter Feeds < 2.2.3 - Admin+ Stored XSS CVE-2024-8983 4.8 MediumOctober 8, 2024
• smashballoon reviews feed, smub reviews feed – add testimonials and customer reviews from google reviews, yelp, tripadvisor, and more +1 more Reviews Feed – Add Testimonials and Customer Reviews From Google Reviews, Yelp, TripAdvisor, and More <= 1.1.2 - Missing Authorization to Authenticated (Subscriber+) Limited Settings Update CVE-2024-8199 4.3 MediumAugust 27, 2024
• smashballoon reviews feed, smub reviews feed – add testimonials and customer reviews from google reviews, yelp, tripadvisor, and more +1 more Reviews Feed – Add Testimonials and Customer Reviews From Google Reviews, Yelp, TripAdvisor, and More <= 1.1.2 - Cross-Site Request Forgery CVE-2024-8200 4.3 MediumAugust 27, 2024
• smashballoon feeds for youtube, smub feeds for youtube (youtube video, channel, and gallery plugin) +1 more Feeds for YouTube (YouTube video, channel, and gallery plugin) <= 2.2.1 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting CVE-2024-6256 6.4 MediumJuly 11, 2024
• smashballoon custom twitter feeds, smub custom twitter feeds – a tweets widget or x feed widget +1 more Custom Twitter Feeds – A Tweets Widget or X Feed Widget <= 2.2.1 - Cross-Site Request Forgery to Plugin Options Update CVE-2024-0379 Public exploit 4.3 MediumFebruary 20, 2024
• smash balloon custom twitter feeds – a tweets widget or x feed widget, smashballoon custom twitter feeds +1 more WordPress Custom Twitter Feeds (Tweets Widget) Plugin <= 2.1.2 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2023-52136 4.3 MediumJanuary 5, 2024
• smashballoon feeds for youtube, smub feeds for youtube (youtube video, channel, and gallery plugin) +1 more Feeds for YouTube <= 2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2023-4841 6.4 MediumSeptember 14, 2023
• smash balloon custom twitter feeds (tweets widget), smashballoon custom twitter feeds +1 more WordPress Custom Twitter Feeds (Tweets Widget) Plugin <= 1.8.4 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2022-33974 5.4 MediumMay 29, 2023
• smashballoon smash balloon social post feed Smash Balloon Social Post Feed < 4.1.6 - Contributor+ Stored XSS CVE-2022-4477 5.4 MediumJanuary 16, 2023
• smashballoon smash balloon social post feed Smash Balloon Social Post Feed < 4.1.1 - Authenticated Reflected Cross-Site Scripting (XSS) CVE-2021-25065 5.4 MediumJanuary 17, 2022
• smashballoon smash balloon social post feed Smash Balloon Social Post Feed < 4.0.1 - Subscriber+ Arbitrary Plugin Settings Update to Stored XSS CVE-2021-24918 5.4 MediumNovember 29, 2021
• smashballoon smash balloon social post feed Smash Balloon Social Post Feed < 2.19.2 - Unauthenticated Stored XSS CVE-2021-24508 6.1 MediumSeptember 13, 2021