Security Advisory

CVE-2025-49937

4.3
MEDIUM

Vulnerability Description

Missing Authorization vulnerability in Syed Balkhi Smash Balloon Social Post Feed custom-facebook-feed allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Smash Balloon Social Post Feed: from n/a through <= 4.3.2.
Published Date October 22, 2025
Official Source NIST NVD Advisory