{"vulnerability": "cve-2021-24508", "sightings": [{"uuid": "8d0d2e8b-b5e3-407e-a8f7-902635542cf7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-24508", "type": "published-proof-of-concept", "source": "https://t.me/crackvaultde/1223", "content": "\ud83d\udce2 New Software: CVE-2021-24508: WordPress Smash Balloon Plugin XSS Vulnerability\n https://crack-vault.de/d/570", "creation_timestamp": "2026-07-20T21:00:05.693037Z"}, {"uuid": "238e5829-73f9-47f6-9e9c-5246d7b33cd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-24508", "type": "seen", "source": "https://t.me/crackvaultde/1222", "content": "\u2728 NEW SOFTWARE ADDED! \u2728\n\n\u25ac\u25ac\u25ac\u25ac\u25ac\u25ac\u25ac\u25ac\u25ac\u25ac\u25ac\u25ac\u25ac\u25ac\u25ac\u25ac\n\n\ud83d\udcdb Name: CVE-2021-24508: WordPress Smash Balloon Plugin XSS Vulnerability\n\ud83d\udd04 Version: 2021-24508\n\ud83d\udce6 Size: 23.47 KB\n\ud83c\udff7\ufe0f Category: CVE Tools\n\n\ud83d\udcdd Description:\nStored Cross-Site Scripting (XSS) in Social Post Feed Plugin (< v2.19.2)\ud83d\udce2 Advisory SummaryVulnerability Type: Stored XSS (CWE-79)Affected Plugin: Smash Balloon Social Post FeedVersions Impacted: < 2.19.2CVSSv3 Score: 6.1 (Medium) [AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N]Attack Vector: Authenticat...\n\n\ud83d\udc68\u200d\ud83d\udcbb Author: CRACK-VAULT\n\n\ud83d\udd17 Links:\n\u2b07\ufe0f Download Page\n\ud83c\udf10 Releaser Website", "creation_timestamp": "2026-07-20T21:00:05.712039Z"}, {"uuid": "d67d971c-6518-4174-a1ca-f812fc372b61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-24508", "type": "published-proof-of-concept", "source": "https://t.me/crackvaultde/1223", "content": "\ud83d\udce2 New Software: CVE-2021-24508: WordPress Smash Balloon Plugin XSS Vulnerability\n https://crack-vault.de/d/570", "creation_timestamp": "2026-07-21T00:00:11.182054Z"}, {"uuid": "80b25456-d5e5-4ca0-844f-529ce477d455", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-24508", "type": "seen", "source": "https://t.me/crackvaultde/1222", "content": "\u2728 NEW SOFTWARE ADDED! \u2728\n\n\u25ac\u25ac\u25ac\u25ac\u25ac\u25ac\u25ac\u25ac\u25ac\u25ac\u25ac\u25ac\u25ac\u25ac\u25ac\u25ac\n\n\ud83d\udcdb Name: CVE-2021-24508: WordPress Smash Balloon Plugin XSS Vulnerability\n\ud83d\udd04 Version: 2021-24508\n\ud83d\udce6 Size: 23.47 KB\n\ud83c\udff7\ufe0f Category: CVE Tools\n\n\ud83d\udcdd Description:\nStored Cross-Site Scripting (XSS) in Social Post Feed Plugin (< v2.19.2)\ud83d\udce2 Advisory SummaryVulnerability Type: Stored XSS (CWE-79)Affected Plugin: Smash Balloon Social Post FeedVersions Impacted: < 2.19.2CVSSv3 Score: 6.1 (Medium) [AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N]Attack Vector: Authenticat...\n\n\ud83d\udc68\u200d\ud83d\udcbb Author: CRACK-VAULT\n\n\ud83d\udd17 Links:\n\u2b07\ufe0f Download Page\n\ud83c\udf10 Releaser Website", "creation_timestamp": "2026-07-21T00:00:11.204809Z"}]}