Read the docs

https://profiles.wordpress.org/smub/

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

https://profiles.wordpress.org/smub/ records in CISA KEV

No https://profiles.wordpress.org/smub/ vulnerabilities are listed in CISA KEV.

Records

1 record

Priority LOW 24

The Smash Balloon Social Photo Feed – Easy Social Feeds Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `data-plugin` attribute in all versions up to, and including, 6.9.0 (Free) and 6.8.…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00227 Published 2025-05-29 No fix listed CWE-79
Open these records in search →