Lucene search
K

WordPress CommentTweets plugin <= 0.6 - Settings Update via CSRF vulnerability

🗓️ 05 Feb 2026 21:31:00Reported by Daniel RufType 
patchstack
 patchstack
🔗 patchstack.com👁 4 Views

WordPress CommentTweets versions 0.6 and earlier have a CSRF vulnerability enabling settings updates.

Related
Detection
Refs
ReporterTitlePublishedViews
Family
Circl
CVE-2023-6845
25 Jan 202416:22
circl
CNNVD
WordPress Plugin CommentTweets Security Vulnerability
8 Jan 202400:00
cnnvd
CVE
CVE-2023-6845
8 Jan 202419:00
cve
Cvelist
CVE-2023-6845 CommentTweets <= 0.6 - Settings Update via CSRF
8 Jan 202419:00
cvelist
NVD
CVE-2023-6845
8 Jan 202419:15
nvd
Prion
Cross site request forgery (csrf)
8 Jan 202419:15
prion
Positive Technologies
PT-2024-15109 · WordPress · Commenttweets
8 Jan 202400:00
ptsecurity
RedhatCVE
CVE-2023-6845
23 May 202504:57
redhatcve
Vulnrichment
CVE-2023-6845 CommentTweets <= 0.6 - Settings Update via CSRF
8 Jan 202419:00
vulnrichment
wpexploit
CommentTweets <= 0.6 - Settings Update via CSRF
16 Dec 202300:00
wpexploit
Rows per page
Vulners
Node

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

05 Feb 2026 21:31Current
5.3Medium risk
Vulners AI Score5.3
CVSS 3.18.8
EPSS0.00275
SSVC
4