WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
twinklesmtp
Published
2026-01-06
Title
twinklesmtp – Email Service Provider For WordPress <= 1.03 - Authenticated (Administrator+) Stored Cross-Site Scripting via Sender Settings
Slug
twispay
Published
2025-04-09
Title
Twispay Credit Card Payments <= 2.1.2 - Reflected Cross-Site Scripting
Slug
twitch-tv-embed-suite
Published
2025-06-27
Title
Twitch TV Embed Suite <= 2.1.0 - Cross-Site Request Forgery
Slug
twitget
Published
2014-08-01
Title
Twitget 3.3.1 - twitget.php Twitter Setting Manipulation CSRF
Slug
twitget
Published
2014-08-01
Title
Twitget 3.3.1 - twitget.php twitget_consumer_key Stored XSS
Slug
twitscription
Published
2025-12-04
Title
Twitscription <= 0.1.1 - Reflected Cross-Site Scripting via admin.php PATH_INFO
Slug
twittee-text-tweet
Published
2023-07-10
Title
Twittee Text Tweet <= 1.0.8 - Reflected XSS
Slug
twitter-anywhere-plus
Published
2024-11-01
Title
Twitter @Anywhere Plus <= 2.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
twitter-auto-publish
Published
2025-11-17
Title
WP Twitter Auto Publish < 1.7.5 - Reflected Cross-Site Scripting via PostMessage
Slug
twitter-bootstrap-collapse-aka-accordian-shortcode
Published
2024-12-17
Title
Twitter Bootstrap Collapse aka Accordian Shortcode <= 1.0 - Stored XSS via Shortcode
Slug
twitter-bootstrap-collapse-aka-accordian-shortcode
Published
2025-01-14
Title
Twitter Bootstrap Collapse aka Accordian Shortcode <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
twitter-card-generator
Published
2025-04-24
Title
Twitter Card Generator <= 1.0.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
twitter-cards-meta
Published
2017-04-06
Title
Twitter Cards Meta < 2.5.0 - CSRF and XSS
Slug
twitter-follow
Published
2024-11-22
Title
Twitter Follow Button < 0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via username Parameter
Slug
twitter-friends-widget
Published
2021-09-08
Title
Twitter Friends Widget <= 3.1 - Reflected Cross-Site Scripting
Slug
twitter-liveblog
Published
2014-12-18
Title
Twitter Liveblog <= 1.1.2 - Multiple CSRF
Slug
twitter-news-feed
Published
2025-01-16
Title
Twitter News Feed <= 1.1.1 - Reflected Cross-Site Scripting
Slug
twitter-plugin
Published
2017-04-12
Title
Multiple BestWebSoft Plugins - Authenticated Cross-Site Scripting (XSS)
Slug
twitter-posts
Published
2023-11-13
Title
TwitterPosts <= 1.0.2 - Settings Update via CSRF
Slug
twitter-posts-to-blog
Published
2026-02-10
Title
Twitter posts to Blog <= 1.11.25 - Missing Authorization to Unauthenticated Plugin Settings Update
Slug
twitter-real-time-search-scrolling
Published
2024-11-04
Title
Twitter real time search scrolling <= 7.0 - Reflected Cross-Site Scripting
Slug
twitter-shortcode
Published
2025-01-16
Title
Twitter Shortcode <= 0.9 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
twitterdash
Published
2014-12-31
Title
twitterDash 2.1 - CSRF & XSS
Slug
twitterpost
Published
2025-01-16
Title
Twitter Post <= 0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
two-factor-2fa-via-email
Published
2026-02-18
Title
Two Factor (2FA) Authentication via Email < 1.9.9 - Two-Factor Authentication Bypass via token