WordPress plugin Custom Twitter Feeds 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

WordPress Custom Twitter Feeds plugin <= 2.2.5 - Cross-Site Request Forgery to Cache Reset via ctf_clear_cache_admin Function vulnerability

Cross-Site Request Forgery to Cache Reset via ctfclearcacheadmin Function vulnerability discovered by Kévin Mosbahi Mika in WordPress Plugin Custom Twitter Feeds Tweets Widget versions = 2.2.5...

CVE-2025-26978

creationtimestamp| type| source ---|---|--- 2025-03-15 23:48:57+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114169121088832455 2025-03-16 02:09:33+00:00| seen| https://t.me/cvedetector/20378 2025-03-17 16:47:48+00:00| published-proof-of-concept|...

Who is the DOGE and X Technician Branden Spikes?

At 49, Branden Spikes isn't just one of the oldest technologists who has been involved in Elon Musk's Department of Government Efficiency DOGE. As the current director of information technology at X/Twitter and an early hire at PayPal , Zip2 ,Tesla and SpaceX , Spikes is also among Musk's most...

CVE-2025-23451

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in titodevera Awesome Twitter Feeds awesome-twitter-feeds allows Reflected XSS.This issue affects Awesome Twitter Feeds: from n/a through = 1.0...

CVE-2025-23762

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Justin Sternberg DsgnWrks Twitter Importer dsgnwrks-twitter-importer allows Reflected XSS.This issue affects DsgnWrks Twitter Importer: from n/a through = 1.1.4...

CVE-2025-23464

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Keir Whitaker Twitter News Feed twitter-news-feed allows Reflected XSS.This issue affects Twitter News Feed: from n/a through = 1.1.1...

CVE-2025-23451

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in titodevera Awesome Twitter Feeds awesome-twitter-feeds allows Reflected XSS.This issue affects Awesome Twitter Feeds: from n/a through = 1.0...

CVE-2025-23762 WordPress DsgnWrks Twitter Importer plugin <= 1.1.4 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Justin Sternberg DsgnWrks Twitter Importer dsgnwrks-twitter-importer allows Reflected XSS.This issue affects DsgnWrks Twitter Importer: from n/a through = 1.1.4...

CVE-2025-23762 WordPress DsgnWrks Twitter Importer plugin <= 1.1.4 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Justin Sternberg DsgnWrks Twitter Importer dsgnwrks-twitter-importer allows Reflected XSS.This issue affects DsgnWrks Twitter Importer: from n/a through = 1.1.4...

CVE-2025-23762

CVE-2025-23762 affects the WordPress plugin DsgnWrks Twitter Importer (versions

CVE-2025-23451 WordPress Awesome Twitter Feeds plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in titodevera Awesome Twitter Feeds awesome-twitter-feeds allows Reflected XSS.This issue affects Awesome Twitter Feeds: from n/a through = 1.0...

CVE-2025-23464 WordPress Twitter News Feed plugin <= 1.1.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Keir Whitaker Twitter News Feed twitter-news-feed allows Reflected XSS.This issue affects Twitter News Feed: from n/a through = 1.1.1...

CVE-2025-23451 WordPress Awesome Twitter Feeds plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in titodevera Awesome Twitter Feeds awesome-twitter-feeds allows Reflected XSS.This issue affects Awesome Twitter Feeds: from n/a through = 1.0...

CVE-2025-23464 WordPress Twitter News Feed plugin <= 1.1.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NotFound Twitter News Feed allows Reflected XSS. This issue affects Twitter News Feed: from n/a through 1.1.1...

CVE-2025-23464

The connected sources confirm a concrete vulnerability: WordPress Twitter News Feed plugin (versions

CVE-2025-23451

The CVE-2025-23451 entry concerns a Reflected Cross-Site Scripting (XSS) vulnerability in the WordPress plugin NotFound Awesome Twitter Feeds (versions up to 1.0). Affected component: the WordPress plugin’s input handling during web page generation, with the root cause described as improper input...

Malicious code in twitter-sc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b0b3d9d25d03f278d57c1a000d070c3a5846334136498ba3ade4b4b94db1e14c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2056 Malicious code in twitter-sc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b0b3d9d25d03f278d57c1a000d070c3a5846334136498ba3ade4b4b94db1e14c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sc-twitter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f06be1b77e7ae85e1f2d220297011b6ba20065beec02746e6ffde49d5d56aa87 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...