Advisories · Technology
smub Custom Twitter Feeds – A Tweets Widget or X Feed Widget.
Every CVE that names smub Custom Twitter Feeds – A Tweets Widget or X Feed Widget among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.4 Medium
Custom Twitter Feeds <= 2.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'buttoncolor' Shortcode Attribute
- smub Custom Twitter Feeds – A Tweets Widget or X Feed Widget
- Cross-site scripting (XSS)
- CVSS 7.2 High
Custom Twitter Feeds <= 2.5.4 - Unauthenticated Stored Cross-Site Scripting via Cached Tweet Text
- smub Custom Twitter Feeds – A Tweets Widget or X Feed Widget
- Cross-site scripting (XSS)
- CVSS 4.3 Medium
Custom Twitter Feeds <= 2.2.5 - Cross-Site Request Forgery to Cache Reset via ctf_clear_cache_admin Function
- smub Custom Twitter Feeds – A Tweets Widget or X Feed Widget
- Cross-site request forgery (CSRF)
- CVSS 4.3 Medium
Custom Twitter Feeds – A Tweets Widget or X Feed Widget <= 2.2.1 - Cross-Site Request Forgery to Plugin Options Update
- smub Custom Twitter Feeds – A Tweets Widget or X Feed Widget
- Cross-site request forgery (CSRF)