Medium 4.3
2025-03-20< 2.3.0
WordPress Custom Twitter Feeds (Tweets Widget) Plugin <= 2.2.5 is vulnerable to Cross Site Request Forgery (CSRF)
Minimum safe version
2.3.0
Update to 2.3.0 or later to address 7 fixable vulnerabilities
WordPress Custom Twitter Feeds (Tweets Widget) Plugin <= 2.2.5 is vulnerable to Cross Site Request Forgery (CSRF)
CVE-2024-49685
CVE-2024-8983
CVE-2024-0379
WordPress Custom Twitter Feeds (Tweets Widget) Plugin <= 2.1.2 is vulnerable to Cross Site Request Forgery (CSRF)
Smash Balloon Plugins (Various Versions) - Reflected Cross-Site Scripting
CVE-2022-33974