Description

WordPress Plugin Smash Balloon Social Post Feed is prone to an unspecified vulnerability. No available information exists regarding this issue and it's impact on a vulnerable website. WordPress Plugin Smash Balloon Social Post Feed version 2.4.2 is vulnerable; prior versions may also be affected.

Remediation

Update to plugin version 2.4.3 or latest

References

https://wordpress.org/plugins/custom-facebook-feed/changelog/

Related Vulnerabilities

WordPress 6.0.x Multiple Vulnerabilities (6.0 - 6.0.8)

WordPress Plugin Advanced Custom Fields PRO Information Disclosure (6.0.2)

PHP Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2007-4825)

WordPress Plugin Facebook Button by BestWebSoft Cross-Site Request Forgery (2.13)

MySQL CVE-2015-0382 Vulnerability (CVE-2015-0382)

Severity

High

Tags

Missing Update