WordPress Ultimate twitter profile widget plugin <= 1.0 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by Nguyen Xuan Chien Patchstack Alliance in WordPress Plugin Ultimate twitter profile widget versions = 1.0...

Oregon Man Charged in ‘Rapper Bot’ DDoS Service

A 22-year-old Oregon man has been arrested on suspicion of operating "Rapper Bot ," a massive botnet used to power a service for launching distributed denial-of-service DDoS attacks against targets -- including a March 2025 DDoS that knocked Twitter/X offline. The Justice Department asserts the...

Friday Squid Blogging: Squid-Shaped UFO Spotted Over Texas

Here's the story. The commenters on X formerly Twitter are unimpressed. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Blog moderation policy...

helper_project (=1.3.0), twitter-buddy (>=1.0.0 <=1.0.4) potentially affected by unknown CVE via requst (=0.0.1-security)

requst NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on requst and may be impacted: - helperproject =1.3.0 - twitter-buddy =1.0.0, =1.0.4 Source cves: unknown CVE Source advisory: OSV:MAL-2025-32121...

Malicious code in leadconduit-twitter (npm)

The package leadconduit-twitter was found to contain malicious code...

Malicious code in harvesting-twitter (npm)

The package harvesting-twitter was found to contain malicious code...

MAL-2025-25048 Malicious code in leadconduit-twitter (npm)

The package leadconduit-twitter was found to contain malicious code...

MAL-2025-22246 Malicious code in harvesting-twitter (npm)

The package harvesting-twitter was found to contain malicious code...

WordPress plugin Photos, Files, YouTube, Twitter, Instagram, TikTok, Ecommerce Contest Gallery Cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

On the Efficacy of Old Features for the Detection of New Bots

For more than a decade now, academicians and online platform administrators have been studying solutions to the problem of bot detection. Bots are computer algorithms whose use is far from being benign: malicious bots are purposely created to distribute spam, sponsor public characters and,...

Debian: Security Advisory (DLA-4204-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 4204-1] twitter-bootstrap3 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4204-1 [email protected] https://www.debian.org/lts/security/ Bastien Roucariès June 01, 2025 https://wiki.debian.org/LTS -...

DLA-4204-1 twitter-bootstrap3 - security update

Bulletin has no description...

Debian dla-4204 : fonts-glyphicons-halflings - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4204 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4204-1 [email protected] https://www.debian.org/lts/security/...

CVE-2025-22743

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Mohsin Rasool Twitter Bootstrap Collapse aka Accordian Shortcode twitter-bootstrap-collapse-aka-accordian-shortcode allows DOM-Based XSS.This issue affects Twitter Bootstrap Collapse aka Accordian...

CVE-2024-30553

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Joby Joseph WP Twitter Mega Fan Box Widget allows Stored XSS.This issue affects WP Twitter Mega Fan Box Widget : from n/a through 1.0...

CVE-2024-31101

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in August Infotech AI Twitter Feeds Twitter widget & shortcode allows Stored XSS.This issue affects AI Twitter Feeds Twitter widget & shortcode: from n/a through 2.4...

CVE-2024-0379

The Custom Twitter Feeds – A Tweets Widget or X Feed Widget plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.2.1. This is due to missing or incorrect nonce validation on the ctfautosavetokens function. This makes it possible for...

CVE-2024-5073

The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Twitter Feed component in all versions up to, and including, 5.9.21 due to insufficient input sanitization and output...

CVE-2024-49685

Cross-Site Request Forgery CSRF vulnerability in Syed Balkhi Custom Twitter Feeds Tweets Widget custom-twitter-feeds allows Cross Site Request Forgery.This issue affects Custom Twitter Feeds Tweets Widget: from n/a through = 2.2.3...