Smash Balloon Social Photo Feed - Easy Social Feeds Plugin
Healthy: 3 vulnerabilities published in the last 24 months.
| Ownership | 100 |
|---|---|
| Maintenance | 100 |
| Security | 85 |
| Support | 25 |
| Reputation | 85 |
Active signals
Facts we detected, with links to the source.
- InfoSEC-33 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| smashballoon | 23 Jul 2014 to 28 Mar 2022, 394 commits |
|---|---|
| Craig at Smash Balloon | 26 Mar 2020 to 14 Nov 2024, 60 commits |
| AhmedGeek | 12 Jun 2024 to 31 Aug 2026, 38 commits |
| lilasmita | 12 Mar 2025 to 11 Dec 2025, 6 commits |
| alexopen | 26 Feb 2026 to 2 Nov 2026, 10 commits |
5 committers recorded. No ownership changes recorded since 3 Nov 2026.
Maintenance
- Last release
- 2 days ago
- Releases, 24 months
- 19
- Tested up to
- 7.1 current
- Requires PHP
- 7.4 supported 8.2+
| Q1 2024 | 4 |
|---|---|
| Q2 2024 | 6 |
| Q3 2024 | 2 |
| Q4 2024 | 2 |
| Q1 2025 | 3 |
| Q2 2025 | 2 |
| Q3 2025 | 0 |
| Q4 2025 | 1 |
| Q1 2026 | 1 |
| Q2 2026 | 4 |
| Q3 2026 | 5 |
| Q4 2026 | 2 |
Last release 2 Nov 2026. Tested with WordPress 7.1 (current).
Support
25% of 8 support threads resolved in the last 2 months.
Security record
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 4 Aug 2026 | Smash Balloon Social Photo Feed <= 6.11.3 - Reflected Cross-Site Scripting via REQUEST_URI Query String | 4.7 | <= 6.11.3 | 6.11.4 | 0 |
| 8 Jul 2026 | Smash Balloon Social Photo Feed – Easy Social Feeds Plugin <= 6.11.1 - Cross-Site Request Forgery to oEmbed Access Token Overwrite via 'sbi_access_token' Parameter | 4.7 | <= 6.11.1 | 6.11.2 | 0 |
| 28 May 2025 | Smash Balloon Instagram Feed <= 6.9.0 (Free) & <= 6.8.0 (Pro) - Authenticated (Contributor+) Stored Cross-Site Scripting via `data-plugin` Attribute | 5.4 | <= 6.9.0 | 6.9.1 | 0 |
| 20 Jul 2021 | Smash Balloon Plugins (Various Versions) - Reflected Cross-Site Scripting | 6.1 | <= 2.9.1 | 2.9.2 | 1 |
| 5 Mar 2019 | Smash Balloon Social Photo Feed <= 1.11.3 - Cross-Site Request Forgery to Back-Up Deletion | 8.8 | < 1.12 | 1.12 | 29 |
| 18 Jan 2018 | Smash Balloon Social Photo Feed <= 1.5.1 - Reflected Cross-Site Scripting | 6.1 | <= 1.5.1 | 1.6 | 1 |
| 19 Nov 2016 | Smash Balloon Social Photo Feed <= 1.4.6.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting | 6.4 | <= 1.4.6.2 | 1.4.7 | 0 |
Source: Wordfence Intelligence.
Reputation
| Q1 2026 | 5.0 |
|---|---|
| Q2 2026 | 3.3 |
| Q3 2026 | 4.9 |
| Q4 2026 | 3.7 |
Average rating fell from 5.0 to 3.7 between Q1 2026 and Q4 2026.
| 5 star | 4157 |
|---|---|
| 4 star | 90 |
| 3 star | 22 |
| 2 star | 26 |
| 1 star | 63 |
- Are you freaking kidding me? · 1 star · 4 Nov 2026
- This plugin and the company failed in every way · 1 star · 17 Oct 2026
- Exclusive offer spam · 1 star · 15 Jun 2026
Momentum
1,000,000+ active installs. History builds with each weekly snapshot.
| 4 May 2026 | 14,060 |
|---|---|
| 11 May 2026 | 27,601 |
| 18 May 2026 | 427,153 |
| 25 May 2026 | 65,465 |
| 1 Jun 2026 | 47,341 |
| 8 Jun 2026 | 355,839 |
| 15 Jun 2026 | 372,925 |
| 22 Jun 2026 | 80,094 |
| 29 Jun 2026 | 55,559 |
| 6 Jul 2026 | 86,993 |
| 13 Jul 2026 | 37,992 |
| 20 Jul 2026 | 361,190 |
| 27 Jul 2026 | 75,204 |
| 3 Aug 2026 | 126,317 |
| 10 Aug 2026 | 433,124 |
| 17 Aug 2026 | 61,232 |
| 24 Aug 2026 | 52,557 |
| 31 Aug 2026 | 387,576 |
| 7 Sep 2026 | 57,072 |
| 14 Sep 2026 | 76,470 |
| 21 Sep 2026 | 380,263 |
| 28 Sep 2026 | 382,227 |
| 5 Oct 2026 | 110,695 |
| 12 Oct 2026 | 42,724 |
| 19 Oct 2026 | 60,087 |
| 26 Oct 2026 | 366,107 |
| 2 Nov 2026 | 92,148 |
Weekly downloads over the last 4 weeks are 18% below the 27-week average.
Healthier alternatives
Same category, higher Canary Score. Never sponsored.
Facts
| Version | 6.15.1 |
|---|---|
| Author | Syed Balkhi |
| Added | 23 Jul 2014 |
| Last updated | 2 Nov 2026 |
| Active installs | 1,000,000+ |
| Requires WordPress | 4.1 |
| Tested up to | 7.1.4 |
| Requires PHP | 7.4 |
| Category | E-commerce & Shopping |
| Tags | Instagram, instagram feed, instagram photos, Instagram widget, instagram gallery |
Other plugins by this author: WPForms - AI Form Builder for WordPress - Contact Forms, Payment Forms, Survey Form, Quiz & More, WP Mail SMTP by WPForms - SMTP for Reliable Email Delivery with Gmail, Outlook, Amazon SES, Brevo, Other SMTP & More, WPCode - Insert Headers and Footers + Custom Code Snippets - WordPress Code Manager, All in One SEO - AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights), Popup Builder & Popup Maker for WordPress - OptinMonster Email Marketing and Lead Generation, Duplicator - Backups & Migration Plugin - Cloud Backups, Scheduled Backups, & More, One Click Demo Import, Easy WP SMTP - WordPress SMTP and Email Logs: Gmail SMTP, Office 365, Outlook, Custom SMTP, and more, Photo Gallery, Sliders, Proofing and Themes - NextGEN Gallery, WP Crontrol, PDF Embedder - PDF Viewer & Embed PDF Files for WordPress, WP Mail Logging
Questions
Is Smash Balloon Social Photo Feed - Easy Social Feeds Plugin still maintained?
Smash Balloon Social Photo Feed - Easy Social Feeds Plugin was last updated on 2 Nov 2026. Its Canary status is Healthy.
Is Smash Balloon Social Photo Feed - Easy Social Feeds Plugin safe?
Smash Balloon Social Photo Feed - Easy Social Feeds Plugin has no open unpatched vulnerabilities on record. 3 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.
Who owns Smash Balloon Social Photo Feed - Easy Social Feeds Plugin?
The wordpress.org author is Syed Balkhi. Recent committers: alexopen, AhmedGeek, lilasmita, Craig at Smash Balloon, smashballoon. We have recorded no ownership change.
What can I use instead of Smash Balloon Social Photo Feed - Easy Social Feeds Plugin?
Plugins in the same category with a higher Canary Score: Feed Them Social - Social Media Feeds, Video, and Photo Galleries, WPZOOM Social Feed Widget & Block, Feeds for YouTube (YouTube video, channel, and gallery plugin), Feeds for TikTok (TikTok feed, video, and gallery plugin), Spotlight Social Photo Feed.