CVE-2017-18504

The twitter-cards-meta plugin before 2.5.0 for WordPress has CSRF...

EUVD-2017-9619

Malware in sbrugna...

EUVD-2017-9620

Malware in sbrugna...

CVE-2017-18503

The twitter-cards-meta plugin before 2.5.0 for WordPress has XSS...

Malicious code in twitter-cards (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-7041 Malicious code in twitter-cards (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

CVE-2024-1769

The CVE-2024-1769 entry concerns the JM Twitter Cards WordPress plugin. Public data confirms information exposure via the meta description that can let unauthenticated users view password-protected post content from the page source in versions up to 12. The vulnerability is documented across mult...

CVE-2024-1769 JM Twitter Cards <= 14 - Information Exposure via Meta Description

The JM Twitter Cards plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 14 via the meta description data. This makes it possible for unauthenticated attackers to view password protected post content when viewing the page source...

WordPress Plugin JM Twitter Cards Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an...

WordPress JM Twitter Cards Plugin <= 12 is vulnerable to Sensitive Data Exposure

Software JM Twitter Cards Type Plugin Vulnerable versions = 12 Fixed in 14 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2024-1769 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID af82bb91b645 Credits Krzysztof Zając Required...

JM Twitter Cards < 14.1.0 - Password Protected Post Access

Description The plugin is vulnerable to Information Exposure via the meta description data, allowing unauthenticated attackers to view password protected post content when viewing the page source...

PT-2024-18290 · WordPress · Jm Twitter Cards

Name of the Vulnerable Software and Affected Versions: JM Twitter Cards plugin for WordPress versions up to, and including, 12 Description: The issue allows unauthenticated attackers to view password protected post content when viewing the page source, due to Information Exposure via the meta...

Artesãos SEOTools 输入验证错误漏洞

SEOTools is an Artesãos open source SEO tool for Laravel and Lumen. Artesãos SEOTools prior to version 0.17.2 has an input validation error vulnerability that stems from a problem with the function eachValue in the file TwitterCards.php, where manipulation of the parameter value results in an ope...

WordPress Twitter Cards Meta Plugin <= 2.9.1 is vulnerable to Cross Site Scripting (XSS)

Software Twitter Cards Meta Type Plugin Vulnerable versions = 2.9.1 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE N/A Patch priority Medium CVSS severity Medium 6.4 Developer Claim ownership PSID 2f6fcb189392 Credits N/A Required privilege...

WordPress twitter-cards-meta plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. twitter-cards-meta plugin is a Twitter account information display plugin used in it. A cross-site scripting vulnerability exists in...

WordPress twitter-cards-meta plugin cross-site request forgery vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. twitter-cards-meta plugin is a Twitter account information display plugin used in it. A cross-site request forgery vulnerability exist...

CVE-2017-18504

The twitter-cards-meta plugin before 2.5.0 for WordPress has CSRF...

CVE-2017-18503

The twitter-cards-meta plugin before 2.5.0 for WordPress has XSS...

CVE-2017-18503

The twitter-cards-meta plugin before 2.5.0 for WordPress has XSS...

Cross site scripting

The twitter-cards-meta plugin before 2.5.0 for WordPress has XSS...