WordPress Tweet Wheel Plugin <= 1.0.3.2 - Reflected Cross Site Scripting
This plugin is prone to a reflected cross site scripting vulnerability, because "consumerkey", "consumersecret,accesstoken", "accesstokensecret" parameters are not sanitized. Solution Update the plugin...