CVE-2017-18504

CVE-2017-18504 affects the WordPress Twitter Cards Meta plugin prior to version 2.5.0. The connected sources consistently state a cross-site request forgery (CSRF) vulnerability in this plugin, indicating that an attacker could exploit CSRF to perform unintended actions on behalf of an authentica...

CVE-2017-18503

The CVE-2017-18503 entry concerns the WordPress Twitter Cards Meta plugin (pre-2.5.0). The connected sources confirm a cross-site scripting (XSS) vulnerability in versions prior to 2.5.0 caused by insufficient validation of client-side data. Impact described as enabling attacker‑controlled script...