Smash Balloon
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Custom Twitter Feeds – A Tweets Widget or X Feed Widget | 1 | – | Jan 5, 2024 |
| Custom Twitter Feeds (Tweets Widget) | 1 | – | May 29, 2023 |
| Smash Balloon Social Post Feed | 1 | – | Apr 15, 2024 |
Exploited and recent CVEs
- CVE-2024-31379 WordPress Smash Balloon Social Post Feed plugin <= 4.2.1 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
- CVE-2023-52136 WordPress Custom Twitter Feeds (Tweets Widget) Plugin <= 2.1.2 is vulnerable to Cross Site Request Forgery (CSRF) 0.2%
- CVE-2022-33974 WordPress Custom Twitter Feeds (Tweets Widget) Plugin <= 1.8.4 is vulnerable to Cross Site Request Forgery (CSRF) 0.2%