Lucene search
K

89 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 9:31 a.m.4 views

CVE-2023-25042

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Liam Gladdy Storm Consultancy oAuth Twitter Feed for Developers plugin = 2.3.0 versions...

5.9CVSS5.7AI score0.00079EPSS
Exploits0References1
NVD
NVD
added 2025/11/11 4:15 a.m.2 views

CVE-2025-11860

The Twitter Feed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ottwitterfeed' shortcode in all versions up to, and including, 1.3.1. This is due to the plugin not properly sanitizing user input and output of the 'width' and 'height' parameters. This makes it possible...

6.4CVSS0.00034EPSS
Exploits0References2
CVE
CVE
added 2025/11/11 3:30 a.m.12 views

CVE-2025-11860

CVE-2025-11860 affects the Twitter Feed WordPress plugin (versions

6.4CVSS4.8AI score0.00034EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/11/11 3:30 a.m.6 views

CVE-2025-11860 Twitter Feed <= 1.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Twitter Feed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ottwitterfeed' shortcode in all versions up to, and including, 1.3.1. This is due to the plugin not properly sanitizing user input and output of the 'width' and 'height' parameters. This makes it possible...

6.4CVSS0.00034EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/11/11 3:30 a.m.3 views

CVE-2025-11860 Twitter Feed <= 1.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Twitter Feed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ottwitterfeed' shortcode in all versions up to, and including, 1.3.1. This is due to the plugin not properly sanitizing user input and output of the 'width' and 'height' parameters. This makes it possible...

6.4CVSS4.8AI score0.00034EPSS
Exploits0References2
Patchstack
Patchstack
added 2025/11/11 12:36 a.m.5 views

WordPress Twitter Feed plugin <= 1.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin Twitter Feed versions = 1.3.1...

6.4CVSS5.8AI score0.00034EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2025/11/11 12:0 a.m.3 views

WordPress plugin Twitter Feed 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site...

6.4CVSS5.8AI score0.00034EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/11/11 12:0 a.m.4 views

PT-2025-46257

Name of the Vulnerable Software and Affected Versions Twitter Feed plugin for WordPress versions up to and including 1.3.1 Description The Twitter Feed plugin for WordPress is susceptible to Stored Cross-Site Scripting through the 'ottwitter feed' shortcode. This occurs because the plugin does no...

6.4CVSS5.3AI score0.00034EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2010-4790

Malware in sbrugna...

4.3CVSS6.3AI score0.0024EPSS
Exploits1References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2012-0979

Malware in sbrugna...

6.8CVSS6.2AI score0.0035EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2021-11325

Malware in sbrugna...

5.4CVSS5.6AI score0.0018EPSS
Exploits2References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-12023

Malicious code in bioql PyPI...

6.5CVSS7.3AI score0.00128EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2023-29021

Malicious code in bioql PyPI...

5.9CVSS6.4AI score0.00079EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-46333

Malicious code in bioql PyPI...

6.4CVSS6.4AI score0.0047EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2023-38464

Malicious code in bioql PyPI...

8.8CVSS9.1AI score0.00059EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2023-36820

Malicious code in bioql PyPI...

5.9CVSS6.5AI score0.00067EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 9:10 a.m.2 views

CVE-2024-5073

The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Twitter Feed component in all versions up to, and including, 5.9.21 due to insufficient input sanitization and output...

6.4CVSS6AI score0.0047EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 6:41 a.m.4 views

CVE-2024-10666

The Easy Twitter Feed – Twitter feeds plugin for WP plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.2.6 via the etf shortcode. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract data from...

4.3CVSS6.7AI score0.00204EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 5:11 a.m.10 views

CVE-2023-32577

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Eji Osigwe DevBuddy Twitter Feed plugin = 4.0.0 versions...

5.9CVSS5.6AI score0.00067EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 2:23 a.m.8 views

CVE-2023-34384

Cross-Site Request Forgery CSRF vulnerability in Kebo Kebo Twitter Feed plugin = 1.5.12 versions...

8.8CVSS7.1AI score0.00059EPSS
Exploits0References1
Rows per page
Query Builder