CVE-2023-25042

MEDIO 4.8CVE-2023-25042 · Published 01/09/2023 · updated 17/06/2026

In breve

CVE-2023-25042 è una vulnerabilità MEDIO (CVSS 4.8) che riguarda oauth twitter feed for developers (stormconsultancy).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.40%, superiore al 34.1% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
oauth twitter feed for developers stormconsultancy	`≤ 2.3.0`	No fix yet

Description

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Liam Gladdy (Storm Consultancy) oAuth Twitter Feed for Developers plugin <= 2.3.0 versions.

References

patchstack.com/database/vulnerability/oauth-twitter-feed-for-developers/wordpress-oauth-twitter-feed-for-developers-plugin-2-3-0-cross-site-scripting-xss-vulnerability · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free