A vulnerability categorized as critical has been discovered in Syed Balkhi Smash Balloon Social Post Feed Plugin up to 4.3.2 on WordPress. The affected element is an unknown function. Such manipulation leads to missing authorization.
This vulnerability is documented as CVE-2025-49937. The attack can be executed remotely. There is not any exploit available.
