Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

Smash Balloon vulnerabilities

3 published CVEs name Smash Balloon among the affected products.

Newest CVEs

  • CVE-2024-31379

    WordPress Smash Balloon Social Post Feed plugin <= 4.2.1 - Cross Site Request Forgery (CSRF) vulnerability

    Smash Balloon · Smash Balloon Social Post Feed

    Medium4.3
  • CVE-2023-52136

    WordPress Custom Twitter Feeds (Tweets Widget) Plugin <= 2.1.2 is vulnerable to Cross Site Request Forgery (CSRF)

    Smash Balloon · Custom Twitter Feeds – A Tweets Widget or X Feed Widget

    Medium4.3
  • CVE-2022-33974

    WordPress Custom Twitter Feeds (Tweets Widget) Plugin <= 1.8.4 is vulnerable to Cross Site Request Forgery (CSRF)

    Smash Balloon · Custom Twitter Feeds (Tweets Widget)

    Medium5.4