agentprime: smub-smash-balloon-social-photo-feed-easy-social-feeds-pluginEvery new CVE for smub-smash-balloon-social-photo-feed-easy-social-feeds-plugin.https://agentprime.io/CVE-2026-15452: Smash Balloon Social Photo Feed <= 6.11.3 - Reflected Cross-Site Scripting via REQUEST_URI Query Stringhttps://agentprime.io/advisories/CVE-2026-15452/https://agentprime.io/advisories/CVE-2026-15452/CVSS 4.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 05 Aug 2026 09:26:25 GMTCVECVE-2026-12002: Smash Balloon Social Photo Feed – Easy Social Feeds Plugin <= 6.11.1 - Cross-Site Request Forgery to oEmbed Access Token Overwrite via 'sbi_access_token' Parameterhttps://agentprime.io/advisories/CVE-2026-12002/https://agentprime.io/advisories/CVE-2026-12002/CVSS 4.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 08 Jul 2026 12:33:16 GMTCVECVE-2025-4583: Smash Balloon Instagram Feed <= 6.9.0 (Free) & <= 6.8.0 (Pro) - Authenticated (Contributor+) Stored Cross-Site Scripting via `data-plugin` Attributehttps://agentprime.io/advisories/CVE-2025-4583/https://agentprime.io/advisories/CVE-2025-4583/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 29 May 2025 04:23:08 GMTCVE