Smash Balloon Social Post Feed, CVE-2025-49937

CVE, Research URL: CVE-2025-49937
Home page URL: Security reports for Smash Balloon Social Post Feed
Application: Smash Balloon Social Post Feed
Published on: Oct 22, 2025
Research Description: Missing Authorization vulnerability in Syed Balkhi Smash Balloon Social Post Feed custom-facebook-feed allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Smash Balloon Social Post Feed: from n/a through <= 4.3.2.
Affected versions: max 4.3.2.
Status: vulnerable