WordPress Plugin Vulnerabilities

Verwei.se WordPress Twitter < 1.0 2 - Cross-Site Scripting (XSS)

Description

The verweise-wordpress-twitter WordPress plugin was affected by a Cross-Site Scripting (XSS) security vulnerability.

Affects Plugins

Plugin icon
verweise-wordpress-twitter
No known fix

References

CVE
CVE-2014-4566
URL
https://codevigilant.com/disclosure/wp-plugin-verweise-wordpress-twitter-a3-cross-site-scripting-xss/

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
5ea14b7f-3f5e-4275-a763-9fb4b1a93ddc

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2024-05-07
Title
Beaver Builder – WordPress Page Builder < 2.8.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2023-12-11
Title
Popup Builder < 4.2.3 - Unauthenticated Stored XSS
Published
2018-01-04
Title
ImageInject <= 1.15 - Stored XSS & CSRF
Published
2025-04-16
Title
Travelfic Toolkit < 1.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2013-06-21
Title
WordPress 3.5.1 - Multiple Cross-Site Scripting (XSS)