Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
instagram-feed
WordPress
· Plugin
7 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
Smash Balloon Social Photo Feed <= 6.11.3 - Reflected Cross-Site Scripting via REQUEST_URI Query String
CVE-2026-15452
instagram-feed
WordPress
Medium
Fix reported
2026-08-05
Smash Balloon Social Photo Feed – Easy Social Feeds Plugin <= 6.11.1 - Cross-Site Request Forgery to oEmbed Access Token Overwrite via 'sbi_access_token' Parameter
CVE-2026-12002
instagram-feed
WordPress
Medium
Fix reported
2026-07-08
Smash Balloon Instagram Feed <= 6.9.0 (Free) & <= 6.8.0 (Pro) - Authenticated (Contributor+) Stored Cross-Site Scripting via `data-plugin` Attribute
CVE-2025-4583
instagram-feed-pro
instagram-feed
WordPress
Medium
Fix reported
2025-06-26
Smash Balloon Social Photo Feed <= 1.5.1 - Reflected Cross-Site Scripting
instagram-feed
WordPress
Medium
Fix reported
2024-01-22
Smash Balloon Social Photo Feed <= 1.11.3 - Cross-Site Request Forgery to Back-Up Deletion
instagram-feed
WordPress
High
Fix reported
2024-01-22
Smash Balloon Plugins (Various Versions) - Reflected Cross-Site Scripting
custom-facebook-feed
custom-twitter-feeds
WordPress
Medium
Fix reported
2024-01-22
Smash Balloon Social Photo Feed <= 1.4.6.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
instagram-feed
WordPress
Medium
Fix reported
2024-01-22
