Smash Balloon

Records14All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Smash Balloon records in CISA KEV

No Smash Balloon vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Custom Twitter Feeds 5 records MEDIUM Smash Balloon Social Post Feed 4 records MEDIUM Feeds For Youtube 2 records LOW Reviews Feed 2 records LOW

Records

2 records in Reviews Feed · all components

TI-2024-07603 CVE-2024-8199 · GHSA-whcw-39v8-h8p9

Missing authorization in smub Reviews Feed – Add Testimonials and Customer Reviews From…

LOW 20

The Reviews Feed – Add Testimonials and Customer Reviews From Google Reviews, Yelp, TripAdvisor, and More plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the '…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00401 Published 2024-08-27 No fix listed CWE-862

TI-2024-07604 CVE-2024-8200 · GHSA-2gjq-7pvc-8hj3

Cross-site request forgery in smub Reviews Feed – Add Testimonials and Customer Reviews…

LOW 19

The Reviews Feed – Add Testimonials and Customer Reviews From Google Reviews, Yelp, TripAdvisor, and More plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.2.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00226 Published 2024-08-27 No fix listed CWE-352

Open these records in search →

Critical	0
High	3
Medium	11
Low	0
No CVSS	0