WordPress Custom Twitter Feeds plugin <= 2.2.3 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin Custom Twitter Feeds Tweets Widget versions = 2.2.3...

PT-2023-19550 · WordPress · Brandid Social Proof (Testimonial) Slider

Name of the Vulnerable Software and Affected Versions: brandiD Social Proof Testimonial Slider plugin versions = 2.2.3 Description: The issue is related to an Authenticated Stored Cross-Site Scripting XSS vulnerability. This means that an attacker with admin+ privileges can inject malicious scrip...