CVE-2023-41856

CVE-2023-41856 is an unauthenticated, reflected XSS in the WordPress Click To Tweet plugin, affecting versions

CVE-2024-23514

CVE-2024-23514 is a Stored XSS vulnerability in the WordPress Click To Tweet plugin (versions up to 2.0.14). The issue arises from improper input neutralization during web page generation, allowing authenticated users (Contributor+) to inject scripts that may execute when others view affected pag...