Advisories · Technology

https://profiles.wordpress.org/smub/ Smash Balloon Instagram Feed Pro.

Every CVE that names https://profiles.wordpress.org/smub/ Smash Balloon Instagram Feed Pro among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-4583 CVE record

CVSS 5.4 Medium

Smash Balloon Instagram Feed <= 6.9.0 (Free) & <= 6.8.0 (Pro) - Authenticated (Contributor+) Stored Cross-Site Scripting via `data-plugin` Attribute
- https://profiles.wordpress.org/smub/ Smash Balloon Instagram Feed Pro
- smub Smash Balloon Social Photo Feed – Easy Social Feeds Plugin
- Cross-site scripting (XSS)
Not analysed yet 29 May 2025