Lucene search
+L

2 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/28 12:00 a.m.•3 views

CVE-2025-48321: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in dyiosah Ultimate twitter profile widget ultimate-twitter-profile-widget allows Stored XSS.This issue affects Ultimate twitter profile widget: from n/a through = 1.0...

7.1CVSS5.8AI score0.00127EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/08/23 2:36 a.m.•11 views

WordPress Ultimate twitter profile widget plugin <= 1.0 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by Nguyen Xuan Chien Patchstack Alliance in WordPress Plugin Ultimate twitter profile widget versions = 1.0...

7.1CVSS6AI score0.00127EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder