Smash Balloon Social Photo Feed – Easy Social Feeds Plugin

WordPress plugin · instagram-feed · WordPress.org ↗

Latest v6.13.0 Last release Aug 31, 2026 Tested up to WP 7.1.1 1,000,000+ active installs

Critical

High

Known total

Unfixed

Running Smash Balloon Social Photo Feed – Easy Social Feeds Plugin on your site? WP Alerts checks your installed version against every entry below and emails you only when one affects you. Free, no tracking.

Scan a site Monitor my sites →

Severity	Vulnerability	Affected	Fixed in	CVE	Published
MEDIUM CVSS 4.7	Smash Balloon Social Photo Feed – Easy Social Feeds Plugin [instagram-feed] < 6.11.4 WPVulnerability	< 6.11.4	v6.11.4	CVE-2026-15452	Aug 4, 2026
MEDIUM CVSS 4.7	Smash Balloon Social Photo Feed – Easy Social Feeds Plugin [instagram-feed] < 6.11.2 WPVulnerability	< 6.11.2	v6.11.2	CVE-2026-12002	Jul 8, 2026
MEDIUM CVSS 5.4	Smash Balloon Social Photo Feed – Easy Social Feeds Plugin [instagram-feed] < 6.9.1 WPVulnerability	< 6.9.1	v6.9.1	CVE-2025-4583	May 28, 2025
UNKNOWN	Smash Balloon Social Photo Feed – Easy Social Feeds Plugin [instagram-feed] < 2.9.2 WPVulnerability	< 2.9.2	v2.9.2	—	Jul 20, 2021
UNKNOWN	Smash Balloon Social Photo Feed – Easy Social Feeds Plugin [instagram-feed] < 1.12 WPVulnerability	< 1.12	v1.12	—	Mar 5, 2019
UNKNOWN	Smash Balloon Social Photo Feed – Easy Social Feeds Plugin [instagram-feed] < 1.6 WPVulnerability	< 1.6	v1.6	—	Feb 7, 2018
UNKNOWN	Smash Balloon Social Photo Feed – Easy Social Feeds Plugin [instagram-feed] < 1.6 WPVulnerability	< 1.6	v1.6	—	Jan 18, 2018
UNKNOWN	Smash Balloon Social Photo Feed – Easy Social Feeds Plugin [instagram-feed] < 1.4.7 WPVulnerability	< 1.4.7	v1.4.7	—	Nov 21, 2016
UNKNOWN	Smash Balloon Social Photo Feed – Easy Social Feeds Plugin [instagram-feed] < 1.4.7 WPVulnerability	< 1.4.7	v1.4.7	—	Nov 19, 2016
UNKNOWN	Smash Balloon Social Photo Feed – Easy Social Feeds Plugin [instagram-feed] < 2.9.2 WPVulnerability	< 2.9.2	v2.9.2	—	—
UNKNOWN	Smash Balloon Social Photo Feed – Easy Social Feeds Plugin [instagram-feed] < 1.12 WPVulnerability	< 1.12	v1.12	—	—
UNKNOWN	Smash Balloon Social Photo Feed – Easy Social Feeds Plugin [instagram-feed] < 1.6 WPVulnerability	< 1.6	v1.6	—	—
UNKNOWN	Smash Balloon Social Photo Feed – Easy Social Feeds Plugin [instagram-feed] < 1.4.7 WPVulnerability	< 1.4.7	v1.4.7	—	—

Data aggregated from WPVulnerability, NVD/NIST, ENISA EUVD, CVE.org and WordPress.org. Provided as-is; verify with the plugin author before acting. Disclaimer.