CVE

CVE-2025-4583 — Smash Balloon Instagram Feed < 6.9.1 - Contributor+ Stored XSS via `data-plugin` Attribute

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2025-4583 Smash Balloon Instagram Feed < 6.9.1 - Contributor+ Stored XSS via `data-plugin` Attribute Unknown < 6.9.1 6.9.1

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.