Skip to content
Threat Feed
Subscribe

Product

Social Post Feed – Simple Social Feeds for WordPress (<= 4.13.0)

1 brief RSS
high advisory

Stored Cross-Site Scripting and RCE in Smash Balloon Social Post Feed

The Smash Balloon Social Post Feed WordPress plugin is vulnerable to Stored XSS that can be escalated to arbitrary plugin installation and remote code execution.

Social Post Feed – Simple Social Feeds for WordPress wordpress xss rce web-application-vulnerability
1r 2t 1c