WordPress Plugin Vulnerabilities

Tweet Wheel <= 1.0.3.2 - Reflected Cross-Site Scripting (XSS)

Description

The Tweet Wheel WordPress plugin was affected by a Reflected Cross-Site Scripting (XSS) security vulnerability.

Affects Plugins

Plugin icon
tweet-wheel
Fixed in 1.0.3.3

References

CVE
CVE-2016-10986
URL
https://packetstormsecurity.com/files/#136783/

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79
CVSS
6.1 (medium)

Miscellaneous

Submitter
ethicalhack3r
Submitter twitter
ethicalhack3r
Verified
No
WPVDB ID
2e1e588c-3d7a-4587-9f3f-e487a268e89f

Timeline

Publicly Published
2016-04-21 (about 9 years ago)
Added
2016-04-22 (about 9 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2025-07-04
Title
Card flip image slideshow <= 1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2024-10-01
Title
YML for Yandex Market < 4.7.3 - Reflected Cross-Site Scripting
Published
2024-08-19
Title
The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce < 5.6.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Video Widget
Published
2024-11-08
Title
Adventure Bucket List <= 1.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2024-07-11
Title
My Sticky Bar < 2.7.2 - Admin+ Stored XSS