CVE · High

CVE-2026-93756 — Smash Balloon Social Post Feed – Simple Social Feeds for WordPress [custom-facebook-feed] < 4.14.0

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2026-93756 Smash Balloon Social Post Feed – Simple Social Feeds for WordPress [custom-facebook-feed] < 4.14.0 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') High 7.2 < 4.14.0 4.14.0 2026-08-15 —

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.