Radar sectionsPlugins & themes
Check my site

WordPress plugin

Smash Balloon Social Post Feed – Simple Social Feeds for WordPress security & vulnerabilities

custom-facebook-feed— active installsLast vulnerability Oct 1, 2026

No known unpatched vulnerabilities in the latest version

All 10 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.

10Known vulnerabilities
  • Critical0
  • High1
  • Medium9
  • Low0
Vulnerabilities per year
2021: 4 vulnerabilities4212022: 1 vulnerability1222024: 1 vulnerability1242025: 2 vulnerabilities2252026: 2 vulnerabilities226

All Smash Balloon Social Post Feed – Simple Social Feeds for WordPress vulnerabilities

Nothing in this view

No vulnerabilities match this filter. Show all.

Smash Balloon Social Post Feed – Simple Social Feeds for WordPress: common questions

Does Smash Balloon Social Post Feed – Simple Social Feeds for WordPress have known vulnerabilities?

Yes. VulnCrest Radar lists 10 known vulnerabilities in Smash Balloon Social Post Feed – Simple Social Feeds for WordPress: 1 high, 9 medium. None are known to affect version null.

How do I check which version of Smash Balloon Social Post Feed – Simple Social Feeds for WordPress I run?

In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.

What is the most recent Smash Balloon Social Post Feed – Simple Social Feeds for WordPress vulnerability?

CVE-2026-93756, published Oct 1, 2026: Smash Balloon Social Post Feed <= 4.13.0 - Unauthenticated Stored Cross-Site Scripting via Facebook Comment Message in Admin Builder Preview. Severity: High (CVSS 7.2).

Is any Smash Balloon Social Post Feed – Simple Social Feeds for WordPress vulnerability listed in CISA KEV?

No. None of the known Smash Balloon Social Post Feed – Simple Social Feeds for WordPress vulnerabilities is currently listed in the CISA KEV catalog.

Search VulnCrest Radar

Are you sure?