CVE-2025-1314

creationtimestamp| type| source ---|---|--- 2025-03-20 09:02:17+00:00| seen| https://t.me/cvedetector/20697 2025-03-20 09:03:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lksdomlg2n2x 2025-03-20 18:20:48+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8251...

CVE-2025-1314 Custom Twitter Feeds <= 2.2.5 - Cross-Site Request Forgery to Cache Reset via ctf_clear_cache_admin Function

The Custom Twitter Feeds – A Tweets Widget or X Feed Widget plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.2.5. This is due to missing or incorrect nonce validation on the ctfclearcacheadmin function. This makes it possible for...

CVE-2025-1314 Custom Twitter Feeds <= 2.2.5 - Cross-Site Request Forgery to Cache Reset via ctf_clear_cache_admin Function

The Custom Twitter Feeds – A Tweets Widget or X Feed Widget plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.2.5. This is due to missing or incorrect nonce validation on the ctfclearcacheadmin function. This makes it possible for...