516 matches found
CVE-2026-89783
creationtimestamp| type| source ---|---|--- 2026-09-16 15:30:08+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvnhft47tr2r...
CVE-2026-84968
creationtimestamp| type| source ---|---|--- 2026-09-07 13:15:26+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3muwlooa74k2r...
WordPress Smash Balloon Social Post Feed plugin <= 4.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'id' Shortcode Attribute vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting via 'id' Shortcode Attribute vulnerability discovered by Wordfence PRISM - Wordfence in WordPress Plugin Smash Balloon Social Post Feed versions = 4.9.0...
CVE-2026-74517
creationtimestamp| type| source ---|---|--- 2026-08-17 16:40:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtc5db4bs62b...
CVE-2026-16775
The Smash Balloon Social Post Feed – Simple Social Feeds for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'id' Shortcode Attribute in all versions up to, and including, 4.9.0 due to insufficient input sanitization and output escaping. This makes it possible for...
CVE-2026-16775 Smash Balloon Social Post Feed <= 4.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'id' Shortcode Attribute
The Smash Balloon Social Post Feed – Simple Social Feeds for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'id' Shortcode Attribute in all versions up to, and including, 4.9.0 due to insufficient input sanitization and output escaping. This makes it possible for...
CVE-2026-16775 Smash Balloon Social Post Feed <= 4.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'id' Shortcode Attribute
The Smash Balloon Social Post Feed – Simple Social Feeds for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'id' Shortcode Attribute in all versions up to, and including, 4.9.0 due to insufficient input sanitization and output escaping. This makes it possible for...
CVE-2026-16775
The Smash Balloon Social Post Feed – Simple Social Feeds for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'id' Shortcode Attribute in all versions up to, and including, 4.9.0 due to insufficient input sanitization and output escaping. This makes it possible for...
CVE-2026-16775
The affected software is the Smash Balloon Social Post Feed – Simple Social Feeds for WordPress plugin. Affected versions: all versions up to and including 4.9.0. Vulnerability type: Stored Cross-Site Scripting via the 'id' Shortcode Attribute, caused by insufficient input sanitization and output...
PT-2026-73110
The Smash Balloon Social Post Feed – Simple Social Feeds for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'id' Shortcode Attribute in all versions up to, and including, 4.9.0 due to insufficient input sanitization and output escaping. This makes it possible for...
CVE-2026-16775: Improper Neutralization of Input During Web Page Generation
The Smash Balloon Social Post Feed – Simple Social Feeds for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'id' Shortcode Attribute in all versions up to, and including, 4.9.0 due to insufficient input sanitization and output escaping. This makes it possible for...
CVE-2026-67180
creationtimestamp| type| source ---|---|--- 2026-08-11 17:02:04+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mst3r2gzln24...
CVE-2026-65509
creationtimestamp| type| source ---|---|--- 2026-08-10 02:16:09+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msozryinbq2u 2026-08-10 22:16:09+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msr4trbamb2w...
CVE-2026-14364
creationtimestamp| type| source ---|---|--- 2026-08-09 09:00:33+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msn7w3xarw24...
CVE-2026-71952
creationtimestamp| type| source ---|---|--- 2026-08-08 17:14:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mslkzripjp27 2026-08-08 18:13:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/jyuesx3qptyww 2026-08-09 05:01:17+00:00| seen|...
CVE-2026-62873
creationtimestamp| type| source ---|---|--- 2026-08-07 01:01:47+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msheab5dm32t 2026-08-07 03:00:29+00:00| seen| https://infosec.exchange/users/offseq/statuses/117051990119645465 2026-08-08 06:07:07+00:00| seen|...
CVE-2026-48087
creationtimestamp| type| source ---|---|--- 2026-08-06 23:08:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msh5uwybhi2m 2026-08-09 04:18:16+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msmpzjxjns27 2026-08-09 05:28:38+00:00| seen|...
CVE-2026-66708
creationtimestamp| type| source ---|---|--- 2026-08-06 21:01:06+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msgwruxti62t...
CVE-2026-20288
creationtimestamp| type| source ---|---|--- 2026-08-06 12:45:09+00:00| seen| https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-prodotti-cisco-29 2026-08-06 13:10:12+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3msg4htwlvh2m...