WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
tweet-old-post
Published
2015-02-02
Title
Revive Old Post < 6.9.4 - Privilege Escalation
Slug
tweet-old-post
Published
2023-01-04
Title
Revive Old Posts – Social Media Auto Post and Scheduling Plugin < 9.0.11 - PHP Object Injection
Slug
tweet-old-post
Published
2025-10-14
Title
Revive Old Posts < 9.3.4 - Missing Authorization
Slug
tweet-wheel
Published
2016-04-21
Title
Tweet Wheel <= 1.0.3.2 - Reflected Cross-Site Scripting (XSS)
Slug
tweetscribe
Published
2014-12-18
Title
Tweetscribe <= 1.1 - Multiple CSRF
Slug
tweetscroll-widget
Published
2024-04-30
Title
TweetScroll Widget <= 1.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
tweetthis-shortcode
Published
2025-09-25
Title
TweetThis Shortcode <= 1.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
twentig
Published
2026-03-28
Title
Twentig < 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'featuredImageSizeWidth'
Slug
twenty20
Published
2023-01-23
Title
Twenty20 Image Before-After <= 2.0.4 - Contributor+ Stored XSS
Slug
twentyfourth-wp-scraper
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
twentyfourth-wp-scraper
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
twentytwenty
Published
2024-12-05
Title
TwentyTwenty <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
twigify
Published
2024-11-12
Title
Twigify <= 1.1.2 - Vulnerable Twig Package
Slug
twimp-wp
Published
2014-12-18
Title
Twimp WP <= 0.1 - Multiple CSRF
Slug
twinklesmtp
Published
2026-01-06
Title
twinklesmtp – Email Service Provider For WordPress <= 1.03 - Authenticated (Administrator+) Stored Cross-Site Scripting via Sender Settings
Slug
twispay
Published
2025-04-09
Title
Twispay Credit Card Payments <= 2.1.2 - Reflected Cross-Site Scripting
Slug
twitch-tv-embed-suite
Published
2025-06-27
Title
Twitch TV Embed Suite <= 2.1.0 - Cross-Site Request Forgery
Slug
twitget
Published
2014-08-01
Title
Twitget 3.3.1 - twitget.php Twitter Setting Manipulation CSRF
Slug
twitget
Published
2014-08-01
Title
Twitget 3.3.1 - twitget.php twitget_consumer_key Stored XSS
Slug
twitscription
Published
2025-12-04
Title
Twitscription <= 0.1.1 - Reflected Cross-Site Scripting via admin.php PATH_INFO
Slug
twittee-text-tweet
Published
2023-07-10
Title
Twittee Text Tweet <= 1.0.8 - Reflected XSS
Slug
twittee-text-tweet
Published
2026-04-21
Title
Twittee Text Tweet <= 1.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'id' Shortcode Attribute
Slug
twitter-anywhere-plus
Published
2024-11-01
Title
Twitter @Anywhere Plus <= 2.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
twitter-auto-publish
Published
2025-11-17
Title
WP Twitter Auto Publish < 1.7.5 - Reflected Cross-Site Scripting via PostMessage
Slug
twitter-bootstrap-collapse-aka-accordian-shortcode
Published
2024-12-17
Title
Twitter Bootstrap Collapse aka Accordian Shortcode <= 1.0 - Stored XSS via Shortcode