Custom Twitter Feeds@* Security Vulnerabilities and Issues — Custom Twitter Feeds@* CVE List

Lucene search

SmashballoonCustom Twitter Feeds*

5 matches found

CVE•added 2024/02/29 1:43 a.m.•96 views

CVE-2024-0379

The Custom Twitter Feeds – A Tweets Widget or X Feed Widget plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.2.1. This is due to missing or incorrect nonce validation on the ctf_auto_save_tokens function. This makes it possible for unauthentic...

4.3CVSS5.2AI score0.18015EPSS

CVE•added 2024/10/31 10:15 a.m.•47 views

CVE-2024-49685

Cross-Site Request Forgery (CSRF) vulnerability in Smash Balloon Custom Twitter Feeds (Tweets Widget) allows Cross Site Request Forgery.This issue affects Custom Twitter Feeds (Tweets Widget): from n/a through 2.2.3.

8.8CVSS5.9AI score0.00033EPSS

CVE•added 2023/05/29 1:15 a.m.•36 views

CVE-2022-33974

Cross-Site Request Forgery (CSRF) vulnerability in Smash Balloon Custom Twitter Feeds (Tweets Widget) plugin

8.8CVSS7AI score0.00051EPSS

CVE•added 2024/01/05 9:15 a.m.•36 views

CVE-2023-52136

Cross-Site Request Forgery (CSRF) vulnerability in Smash Balloon Custom Twitter Feeds – A Tweets Widget or X Feed Widget.This issue affects Custom Twitter Feeds – A Tweets Widget or X Feed Widget: from n/a through 2.1.2.

8.8CVSS8.6AI score0.0007EPSS

CVE•added 2024/10/08 6:15 a.m.•35 views

CVE-2024-8983

Custom Twitter Feeds WordPress plugin before 2.2.3 is not filtering some of its settings allowing high privilege users to inject scripts.

4.8CVSS5.4AI score0.00018EPSS