cleantalk
Vulnerabilities and Security Researches

Smash Balloon Social Photo Feed – Best Social Feed Plugin for WordPress, 4cd4f9d7a71cd609f161d10286616a84533e6de4

Published on
Nov 21, 2016
Research Description
Smash Balloon Social Photo Feed – Easy Social Feeds Plugin [instagram-feed] < 1.4.7 WordPress Instagram Feed Plugin <= 1.4.6.2 - Cross Site Request Forgery Because of this vulnerability, attackers can perform a wide variety of actions, such as stealing Administrators' session tokens, or performing arbitrary actions on their behalf. Update the plugin.
Affected versions
max 1.4.7.
Status
vulnerable