Skip to content
smub Custom Twitter Feeds – A Tweets Widget or X Feed Widget
-
CVE-2026-84909
Medium 6.4
Custom Twitter Feeds <= 2.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'buttoncolor' Shortcode Attribute
0.4%
-
CVE-2026-6177
High 7.2
Custom Twitter Feeds <= 2.5.4 - Unauthenticated Stored Cross-Site Scripting via Cached Tweet Text
0.5%
-
CVE-2025-1314
Medium 4.3
Custom Twitter Feeds <= 2.2.5 - Cross-Site Request Forgery to Cache Reset via ctf_clear_cache_admin Function
0.2%
-
CVE-2024-0379
Medium 4.3
Custom Twitter Feeds – A Tweets Widget or X Feed Widget <= 2.2.1 - Cross-Site Request Forgery to Plugin Options Update
1.0%