<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: smub-smash-balloon-social-post-feed-simple-social-feeds-for-wordpress</title><description>Every new CVE for smub-smash-balloon-social-post-feed-simple-social-feeds-for-wordpress.</description><link>https://agentprime.io/</link><item><title>CVE-2026-93756: Smash Balloon Social Post Feed &lt;= 4.13.0 - Unauthenticated Stored Cross-Site Scripting via Facebook Comment Message in Admin Builder Preview</title><link>https://agentprime.io/advisories/CVE-2026-93756/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-93756/</guid><description>CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 02 Oct 2026 07:39:27 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-16775: Smash Balloon Social Post Feed &lt;= 4.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via &apos;id&apos; Shortcode Attribute</title><link>https://agentprime.io/advisories/CVE-2026-16775/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-16775/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 16 Aug 2026 05:27:30 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-4577: Smash Balloon Custom Facebook Feed &lt;= 4.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via `data-color` Attribute</title><link>https://agentprime.io/advisories/CVE-2025-4577/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-4577/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 10 Jun 2025 11:22:52 GMT</pubDate><category>CVE</category></item></channel></rss>