CVE-2024-31379 WordPress Smash Balloon Social Post Feed plugin <= 4.2.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Smash Balloon Smash Balloon Social Post Feed.This issue affects Smash Balloon Social Post Feed: from n/a through 4.2.1...

CVE-2024-31379 WordPress Smash Balloon Social Post Feed plugin <= 4.2.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Smash Balloon Smash Balloon Social Post Feed.This issue affects Smash Balloon Social Post Feed: from n/a through 4.2.1...

PT-2024-24025 · Smash Balloon · Smash Balloon Social Post Feed

Name of the Vulnerable Software and Affected Versions: Smash Balloon Social Post Feed versions through 4.2.1 Description: A Cross-Site Request Forgery CSRF issue affects the Smash Balloon Social Post Feed. This type of issue allows an attacker to perform unintended actions on a web application th...

WordPress Plugin Smash Balloon Social Post Feed 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. WordPress Plugin Smash Balloon Social Post Feed A...

WordPress Smash Balloon Social Post Feed plugin <= 4.2.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Majed Refaea Patchstack Alliance in WordPress Plugin Smash Balloon Social Post Feed versions = 4.2.1...

WordPress Smash Balloon Social Post Feed Plugin <= 4.2.1 is vulnerable to Cross Site Request Forgery (CSRF)

Software Smash Balloon Social Post Feed Type Plugin Vulnerable versions = 4.2.1 Fixed in 4.2.2 OWASP Top 10 A4: Insecure Design Classification Cross Site Request Forgery CSRF CVE CVE-2024-31379 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 0081dd599b5c Credits Majed Refa...

CVE-2023-5970

creationtimestamp| type| source ---|---|--- 2023-12-24 15:26:21+00:00| seen| https://t.me/ctinow/159039 2025-10-24 21:02:35+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m3xrj4a4ub27 2025-10-26 22:33:03+00:00| exploited| https://www.cybereason.com/blog/ttp-briefing-q3-2025...

CVE-2022-4244

creationtimestamp| type| source ---|---|--- 2023-09-26 00:34:31+00:00| seen| https://t.me/cibsecurity/71018 2025-08-24 21:02:21+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lx6f2nqhsn2t...

CVE-2025-68469

creationtimestamp| type| source ---|---|--- 2023-07-01 16:49:05+00:00| published-proof-of-concept| https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-fff3-4rp7-px97 2025-12-18 19:28:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mabvvibuh22g...

CVE-2023-2503

CVE-2023-2503 affects the 10Web Social Post Feed WordPress plugin (pre-1.2.9). Root cause: the plugin does not sanitize/escape certain parameters before output, enabling a Reflected XSS under admin contexts. Impact per sources: MEDIUM (CVSS 3.1 base 6.1). Remediation: upgrade to plugin version 1....

CVE-2023-2503 10WebSocial < 1.2.9 - Reflected XSS

The 10Web Social Post Feed WordPress plugin before 1.2.9 does not sanitise and escape some parameter before outputting it back in a page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

WordPress plugin 10Web Social Post Feed 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

WordPress 10Web Social Post Feed Plugin <= 1.2.8 is vulnerable to Cross Site Scripting (XSS)

Software 10Web Social Post Feed Type Plugin Vulnerable versions = 1.2.8 Fixed in 1.2.9 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE N/A Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID 73c5db117428 Credits Unknown Required privileg...

CVE-2023-27008

creationtimestamp| type| source ---|---|--- 2023-03-28 18:39:40+00:00| seen| https://t.me/cibsecurity/60894 2025-02-18 23:42:22+00:00| seen| Telegram/Dl3znzLPzoP-cgpG8oJgO7XtbOQC-5Y3c0eHZ-BL4-WM4pQb 2025-10-03 21:02:30+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m2cxppqm2...

WordPress Smash Balloon Social Post Feed Plugin < 4.1.6 XSS Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:smashballoon:smashballoonsocialpostfeed"; ifdescription...

CVE-2022-4477 Smash Balloon Social Post Feed < 4.1.6 - Contributor+ Stored XSS

The Smash Balloon Social Post Feed WordPress plugin before 4.1.6 does not validate and escapes some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as a contributor to perform Stored Cross-Site Scripting attacks against logged-in...

CVE-2022-4477

The CVE-2022-4477 entry concerns the WordPress plugin Smash Balloon Social Post Feed (before 4.1.6). The vulnerability is a Stored Cross-Site Scripting (XSS) flaw caused by incomplete validation/escaping of shortcode attributes, allowing a low-privilege user (contributor) to inject scripts that a...

WordPress plugin Smash Balloon Social Post Feed 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

CVE-2022-36323

creationtimestamp| type| source ---|---|--- 2022-08-10 16:25:55+00:00| seen| https://t.me/cibsecurity/47854 2026-04-14 03:04:52+00:00| seen| https://www.acn.gov.it/portale/w/aggiornamenti-per-prodotti-siemens-20 2026-04-14 13:10:23+00:00| seen|...

WordPress Mitsol Social Post Feed plugin cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...