Smash Balloon Social Photo Feed – Easy Social Feeds Plugin

89 Quality Score

Active Installs

27/30

With 1 million active installs, it is one of the most widely deployed social feed plugins in the WordPress ecosystem, far outpacing every listed alternative.

Update Freshness

25/25

Updated June 2026 and tested against WordPress 7.0, the maintenance signals are excellent for a plugin at this scale.

User Rating

15/15

A 98 out of 100 from 4,342 reviewers indicates consistently strong user satisfaction.

Support Health

8/15

Only 2 of 5 support threads are resolved (40%), which is a weak spot relative to the plugin's size and likely reflects users being routed to paid support tiers.

WP Compatibility

15/15

Tested with WordPress 7.0 and requiring only PHP 7.4 and WordPress 4.1, the compatibility range is broad and current.

Scores higher than 99% of indexed plugins

About

Formerly "Instagram Feed". Display clean, customizable, and responsive Instagram feeds from multiple accounts. Supports Instagram oEmbeds.

Active Installs 1M+

Rating ★★★★½ 4.9/5

Last Updated 2026-09-23 7:03pm GMT

Requires WordPress 4.1+

Tested Up To 7.1.2

Requires PHP 7.4+

Security History

7 known vulnerabilities, all patched

1 High 6 Medium

Most recent: August 4, 2026

View details ▸

Smash Balloon Social Photo Feed <= 6.11.3 - Reflected Cross-Site Scripting via REQUEST_URI Query String Medium

August 4, 2026 Patched in ["6.11.4"] CVE-2026-15452

Smash Balloon Social Photo Feed – Easy Social Feeds Plugin <= 6.11.1 - Cross-Site Request Forgery to oEmbed Access Token Overwrite via 'sbi_access_token' Parameter Medium

July 8, 2026 Patched in ["6.11.2"] CVE-2026-12002

Smash Balloon Instagram Feed <= 6.9.0 (Free) & <= 6.8.0 (Pro) - Authenticated (Contributor+) Stored Cross-Site Scripting via `data-plugin` Attribute Medium

May 28, 2025 Patched in ["6.9.1"] CVE-2025-4583

Smash Balloon Plugins (Various Versions) - Reflected Cross-Site Scripting Medium

July 20, 2021 Patched in ["2.9.2"]

Smash Balloon Social Photo Feed <= 1.11.3 - Cross-Site Request Forgery to Back-Up Deletion High

March 5, 2019 Patched in ["1.12"]

Smash Balloon Social Photo Feed <= 1.5.1 - Reflected Cross-Site Scripting Medium

January 18, 2018 Patched in ["1.6"]

Smash Balloon Social Photo Feed <= 1.4.6.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting Medium

November 19, 2016 Patched in ["1.4.7"]

What It Does

Smash Balloon Social Photo Feed (formerly Instagram Feed) pulls public Instagram photos from one or more accounts and renders them as a customizable, responsive feed anywhere on a WordPress site via shortcode, widget, or block. It supports Instagram oEmbeds and works without requiring a Personal API token from Meta for basic displays.

Who It's For

This plugin suits site owners who rely on Instagram as a primary content channel and want a low-effort way to keep their WordPress site visually fresh, including lifestyle bloggers, photographers, restaurants, travel agencies, beauty brands, real estate agents, and small retailers. It is a good fit if you want a hands-off feed that updates automatically without manual curation.

Who Should Skip It

If you only need a single static Instagram embed, the native WordPress Instagram block already handles that with zero setup. Skip this if you do not actually maintain an active Instagram presence or if you require advanced shoppable feeds, story highlights, or full UGC moderation, as those features sit behind the paid Smash Balloon Pro tier.

The Bottom Line

Smash Balloon Social Photo Feed earns its 89.07/100 overall score by combining massive adoption, strong ratings, and current maintenance, and it is the default choice for most WordPress sites that want a reliable Instagram feed. The weak support resolution rate is the only meaningful concern, but for a free plugin at this scale, the trade-off is acceptable. Recommended for any site where Instagram is a real part of the content strategy.

Pick this if you prefer a newer block-editor-first experience and do not need the maturity of a million-install plugin.

Social Feed Gallery 83/100

Pick this if gallery layouts and visual filtering matter more to you than brand recognition and long-term support history.

My Sticky Elements 83/100

Pick this only if your real goal is sticky contact buttons and floating chat widgets; Instagram is just one small piece of it.

WPZOOM Social Feed Widget & Block 82/100

Pick this if you want a lightweight widget-focused solution from a long-standing theme house and do not need Smash Balloon's broader feature set.

Easy Social Feed – Social Photos Gallery and Post Feed for WordPress 81/100

Pick this if you need combined Facebook and Instagram feeds in a single plugin and value multi-network support over polish.