Yatoon Social Feed lets you show your Facebook Page photos and Instagram Business account photos side by side (or separately) anywhere on your WordPress site, using a simple shortcode. Instead of routing your login through a third-party server, this plugin connects directly with your own Meta app :
PricingFree downloadThe WordPress.org download is free. Pro versions, add-ons or external services may cost extra.
CompatibilityRequires WordPress 5.8 and PHP 7.4.
SourceWordPress plugins · Nov 14, 2026
01 / Source details
Aboutthistool.
Yatoon Social Feed lets you show your Facebook Page photos and Instagram Business account photos side by side (or separately) anywhere on your WordPress site, using a simple shortcode.
Instead of routing your login through a third-party server, this plugin connects directly with your own Meta app : you enter its App ID and App Secret once, click Connect, and the plugin exchanges the result for a long-lived token on your own server. Nothing passes through Yatoon, and no Meta App Review is needed for your own Page and account. If you prefer, you can still paste a token you generated yourself.
Features
Connect a Facebook Page with one click (“Connect with Facebook”): enter your own Meta app credentials once and the plugin obtains a long-lived Page token for you. Pasting a token manually is still possible
Connect an Instagram Business or Creator account with one click (“Connect with Instagram”); the plugin renews the token automatically before it expires
Instagram carousel posts (several photos or videos in one post) open as a slideshow in the lightbox
Posts you delete on Facebook or Instagram disappear from your feed on the next sync
Email and dashboard warnings when a connection needs attention (for example a token that cannot be renewed)
Automatic background sync (hourly, twice daily, or daily) – or sync manually with one click
Independent grid settings for Facebook and Instagram (columns, rows, spacing)
Optional profile header showing avatar, name, follower count, bio, and a Follow button – auto-synced from the connected accounts, no manual typing required
Simple shortcode: [yatoon_social_feed]
Responsive layouts, mobile columns, gallery/card/social-wall presets, live device preview, and an accessible lightbox
Local caching for synced Facebook and Instagram images, so temporary CDN URLs do not make the feed disappear
TikTok account sync via the official Login Kit + Display API, with curated links as a fallback
Privacy-first click-to-load official TikTok players; covers are cached locally during sync
Fully translatable, with a bundled .pot file
Lightweight: no Meta JavaScript SDKs loaded on your site
Pro Version
Pro adds caption keyword exclusion and a Custom CSS field, so you can curate the feed and match it to your site without a child theme. Upgrade to Pro .
This plugin connects to external APIs provided by Meta (Facebook/Instagram) to retrieve photos and profile information. These calls are made server-side from your WordPress installation – no Meta JavaScript SDK is loaded in visitors’ browsers.
Facebook Graph API and Facebook Login Used to connect your account and to fetch your Facebook Page profile data (name, avatar, follower count, bio), photos, videos and posts. When you click “Connect with Facebook” your browser is sent to facebook.com to log in and approve access; your App ID, App Secret and the returned authorization code are then exchanged for tokens by your WordPress server. Data is also sent when you verify a token and during background sync. – Service: Facebook / Meta Platforms, Inc. – Endpoints: https://graph.facebook.com/ and https://www.facebook.com/ (login dialog) – Terms of Service: https://developers.facebook.com/terms/ – Privacy Policy: https://www.facebook.com/privacy/policy/
Instagram API with Instagram Login Used to connect your account and to fetch your Instagram profile data and media. When you click “Connect with Instagram” your browser is sent to instagram.com to log in and approve access; your Instagram app ID, app secret and the returned authorization code are then exchanged for tokens by your WordPress server. Tokens are renewed automatically. Data is also sent when you verify a token and during background sync. – Service: Instagram / Meta Platforms, Inc. – Endpoints: https://graph.instagram.com/, https://api.instagram.com/oauth/ and https://www.instagram.com/oauth/ (login dialog) – Terms of Service: https://developers.facebook.com/terms/ – Privacy Policy: https://privacycenter.instagram.com/policy/
Facebook and Instagram media (video playback) Facebook and Instagram video files are not copied to your server. When a visitor plays a video in the lightbox, their browser loads the file from Meta’s content delivery network (hosts such as *.fbcdn.net and *.cdninstagram.com), which makes the visitor’s IP address and browser details visible to Meta, as for any web resource. – Service: Meta Platforms, Inc. – Terms of Service: https://developers.facebook.com/terms/ – Privacy Policy: https://www.facebook.com/privacy/policy/
Freemius SDK (licensing and optional usage data) The plugin includes the Freemius SDK to manage licensing and updates. With your consent in the opt-in screen, it sends basic site information (such as your site URL, WordPress and PHP versions, plugin version and your admin email address) to Freemius. If you skip the opt-in, only the data needed for licensing a paid plan is exchanged. – Service: Freemius, Inc. – Endpoints: https://api.freemius.com/ and https://wp.freemius.com/ – Terms of Service: https://freemius.com/terms/ – Privacy Policy: https://freemius.com/privacy/
TikTok Embed Player (optional) Only when a visitor chooses to load a synced or curated TikTok video, their browser connects to TikTok to play it. Account syncing also sends the administrator’s saved app credentials and account token to TikTok’s OAuth and Display API endpoints from the WordPress server. – Service: TikTok Pte. Ltd. – Endpoints: https://open.tiktokapis.com/v2/oauth/ and https://open.tiktokapis.com/v2/video/; player: https://www.tiktok.com/player/ – Terms of Service: https://www.tiktok.com/legal/terms-of-service – Privacy Policy: https://www.tiktok.com/legal/page/row/privacy-policy/en
This plugin does not collect or store visitor data. The only data transmitted to Meta’s APIs is your access token (to authenticate requests) and API query parameters (for example, requested fields and pagination limits).
02 / Source details
Gettingstarted.
01Upload the plugin files to /wp-content/plugins/yatoon-social-feed , or install the plugin through the WordPress Plugins screen directly.
02Activate the plugin through the ‘Plugins’ screen in WordPress.
03Go to the Yatoon Social Feed menu item in your WordPress admin sidebar.
04In your Meta app add the redirect URL shown in the plugin, then enter the App ID and App Secret under Facebook Page and click Save & Connect with Facebook . Do the same under Instagram Account if you use Instagram. For TikTok, create an approved Developer app with Login Kit and Display API, enter its client key/secret, save, then connect the account.
05Approve the connection on Meta’s screen and, if you manage several Pages, pick the one to show.
06The first sync starts automatically; use “Sync” any time to refresh manually.
07Add the [yatoon_social_feed] shortcode to any page or post.
03 / Source details
Frequently asked questions.
Why does the frontend show old photos while the admin preview is current?
The preview reads saved posts without using the rendered-markup cache. A separate whole-page cache can still serve old HTML without running the plugin. Version 1.1.1 tags pages rendered by the feed and purges those LiteSpeed cache entries when the feed cache is invalidated. Update, open WordPress admin once, then sync. If an independent CDN or page-builder fragment cache is enabled, clear it separately too.
Do I need a Facebook Developer account?
You need a free Meta Developer account and your own Meta app, since Meta requires all API access to go through an App ID and App Secret. The settings screen lists the one-time setup steps (add the redirect URL, copy the App ID and Secret) and then connects with one click. Because the app is your own and you are its owner, you do not need to submit it for Meta’s App Review for your own Page and account.
How long do the tokens last?
A Facebook Page Access Token obtained from a long-lived User token, as described in our setup guide, normally has no scheduled expiry, although Meta can still revoke it (for example after a password change). An Instagram Access Token lasts about 60 days; the plugin renews it automatically once a day while it is valid, and you can also renew it manually from the settings screen. If a token ever stops working, the plugin shows a warning in the admin and emails the site administrator (you can turn the email off). Already synced photos stay on your site in the meantime.
How does TikTok automatic sync work?
TikTok requires your own approved Developer app. Add the exact HTTPS callback URL shown in the plugin, enable user.info.basic and video.list , save the client key/secret, and click Connect TikTok account. The plugin exchanges and refreshes tokens server-side, then retrieves the account’s public videos during the existing hourly, twice-daily, or daily WP-Cron sync. It does not publish videos to TikTok.
Does this plugin load Facebook’s, Instagram’s, or TikTok’s JavaScript on my site?
No Meta or TikTok player is loaded until a visitor explicitly clicks a video. Meta and TikTok API calls happen server-side from your WordPress installation; Facebook, Instagram and TikTok images are cached on your own server during sync. Facebook and Instagram video files are not downloaded: when a visitor plays one in the lightbox, their browser streams it directly from Meta’s content delivery network.
What data does this plugin store?
The plugin stores your Meta app credentials (App ID and secret), your Facebook/Instagram/TikTok access tokens and basic profile info in the WordPress options table, plus a local cache of synced post metadata. TikTok account tokens are kept server-side and are never sent to visitors. The plugin does not collect or store any visitor data. Playing a Facebook or Instagram video, or loading a TikTok player, connects the visitor’s browser to those services, as described under External Services.
Why does the plugin email me?
When a connection needs attention (for example an Instagram token that could not be renewed, or repeated sync failures) the plugin sends a short email to the site administrator address, at most once a week per platform. You can turn this off under Advanced sync settings.
What happens to my data if I delete the plugin?
If you delete the plugin (not just deactivate it) from the Plugins screen, all of its stored options and its database table are automatically removed.
FinderPress Media Auditor helps site administrators scan for broken images, missing Media Library files, unreachable media URLs, and other media issues across WordPress content. Use it to audit images, video, audio, PDFs, featured images, and attachment files without sending scan data to an external
The Accepted Payment Methods plugin is a straightforward, lightweight solution that enhances your website by displaying visually appealing icons of the payment methods you accept. This plugin is ideal for a variety of websites, including e-commerce platforms, service-oriented websites, and informati
