Filter
Software
Smashballoon Custom Twitter FeedsWordPress Custom Twitter Feeds (Tweets Widget) Plugin <= 2.1.2 is vulnerable to Cross Site Request Forgery (CSRF)
8.8
First published (updated )
Smashballoon Custom Twitter FeedsWordPress Custom Twitter Feeds (Tweets Widget) Plugin <= 1.8.4 is vulnerable to Cross Site Request Forgery (CSRF)
8.8
First published (updated )
Smashballoon Feeds For YoutubeFeeds for YouTube (YouTube video, channel, and gallery plugin) <= 2.2.1 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
6.4
EPSS
0.05%
First published (updated )
Smashballoon Smash Balloon Social Post FeedSmash Balloon Social Post Feed < 2.19.2 - Unauthenticated Stored XSS
6.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Smashballoon Smash Balloon Social Post FeedSmash Balloon Social Post Feed < 4.0.1 - Subscriber+ Arbitrary Plugin Settings Update to Stored XSS
5.4
First published (updated )
Smashballoon Smash Balloon Social Post FeedSmash Balloon Social Post Feed < 4.1.1 - Authenticated Reflected Cross-Site Scripting (XSS)
5.4
First published (updated )
Smashballoon Smash Balloon Social Post FeedSmash Balloon Social Post Feed < 4.1.6 - Contributor+ Stored XSS
5.4
First published (updated )
Smashballoon Reviews Feed WordpressReviews Feed – Add Testimonials and Customer Reviews From Google Reviews, Yelp, TripAdvisor, and More <= 1.1.2 - Missing Authorization to Authenticated (Subscriber+) Limited Settings Update
4.3
EPSS
0.05%
First published (updated )
Smashballoon Reviews Feed WordpressReviews Feed – Add Testimonials and Customer Reviews From Google Reviews, Yelp, TripAdvisor, and More <= 1.1.2 - Cross-Site Request Forgery
4.3
EPSS
0.05%
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.