CVE-2024-49685

Description

References

• patchstack.com/database/Wordpress/Plugin/custom-twitter-feeds/vulnerability/wordpress-custom-twitter-feeds-plugin-2-2-3-cross-site-request-forgery-csrf-vulnerability

Weitere Schwachstellen in custom twitter feeds

• CVE-2024-8983MITTEL 4.8Custom Twitter Feeds WordPress plugin before 2.2.3 does not sanitise and escape some of its settings, which could allow high privilege users…
• CVE-2024-0379MITTEL 4.3The Custom Twitter Feeds – A Tweets Widget or X Feed Widget plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions…
• CVE-2023-52136HOCH 8.8Cross-Site Request Forgery (CSRF) vulnerability in Smash Balloon Custom Twitter Feeds – A Tweets Widget or X Feed Widget.This issue affects …
• CVE-2022-33974HOCH 8.8Cross-Site Request Forgery (CSRF) vulnerability in Smash Balloon Custom Twitter Feeds (Tweets Widget) plugin <= 1.8.4 versions.