WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
twentyfourth-wp-scraper
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
twentytwenty
Published
2024-12-05
Title
TwentyTwenty <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
twigify
Published
2024-11-12
Title
Twigify <= 1.1.2 - Vulnerable Twig Package
Slug
twimp-wp
Published
2014-12-18
Title
Twimp WP <= 0.1 - Multiple CSRF
Slug
twinklesmtp
Published
2026-01-06
Title
twinklesmtp – Email Service Provider For WordPress <= 1.03 - Authenticated (Administrator+) Stored Cross-Site Scripting via Sender Settings
Slug
twispay
Published
2025-04-09
Title
Twispay Credit Card Payments <= 2.1.2 - Reflected Cross-Site Scripting
Slug
twitch-tv-embed-suite
Published
2025-06-27
Title
Twitch TV Embed Suite <= 2.1.0 - Cross-Site Request Forgery
Slug
twitget
Published
2014-08-01
Title
Twitget 3.3.1 - twitget.php Twitter Setting Manipulation CSRF
Slug
twitget
Published
2014-08-01
Title
Twitget 3.3.1 - twitget.php twitget_consumer_key Stored XSS
Slug
twitscription
Published
2025-12-04
Title
Twitscription <= 0.1.1 - Reflected Cross-Site Scripting via admin.php PATH_INFO
Slug
twittee-text-tweet
Published
2023-07-10
Title
Twittee Text Tweet <= 1.0.8 - Reflected XSS
Slug
twittee-text-tweet
Published
2026-04-21
Title
Twittee Text Tweet <= 1.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'id' Shortcode Attribute
Slug
twitter-anywhere-plus
Published
2024-11-01
Title
Twitter @Anywhere Plus <= 2.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
twitter-auto-publish
Published
2025-11-17
Title
WP Twitter Auto Publish < 1.7.5 - Reflected Cross-Site Scripting via PostMessage
Slug
twitter-bootstrap-collapse-aka-accordian-shortcode
Published
2024-12-17
Title
Twitter Bootstrap Collapse aka Accordian Shortcode <= 1.0 - Stored XSS via Shortcode
Slug
twitter-bootstrap-collapse-aka-accordian-shortcode
Published
2025-01-14
Title
Twitter Bootstrap Collapse aka Accordian Shortcode <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
twitter-card-generator
Published
2025-04-24
Title
Twitter Card Generator <= 1.0.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
twitter-cards-meta
Published
2017-04-06
Title
Twitter Cards Meta < 2.5.0 - CSRF and XSS
Slug
twitter-feeds
Published
2026-03-20
Title
Twitter Feeds <= 1.0.0 - Authenticated (Contributor+) Cross-Site Scripting via 'tweet_title' Shortcode Attribute
Slug
twitter-follow
Published
2024-11-22
Title
Twitter Follow Button < 0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via username Parameter
Slug
twitter-friends-widget
Published
2021-09-08
Title
Twitter Friends Widget <= 3.1 - Reflected Cross-Site Scripting
Slug
twitter-liveblog
Published
2014-12-18
Title
Twitter Liveblog <= 1.1.2 - Multiple CSRF
Slug
twitter-news-feed
Published
2025-01-16
Title
Twitter News Feed <= 1.1.1 - Reflected Cross-Site Scripting
Slug
twitter-plugin
Published
2017-04-12
Title
Multiple BestWebSoft Plugins - Authenticated Cross-Site Scripting (XSS)
Slug
twitter-posts
Published
2023-11-13
Title
TwitterPosts <= 1.0.2 - Settings Update via CSRF