The plugin was vulnerable to Authenticated Stored Cross Site Scripting (XSS) within the Twitter username to mention text field.
1. Insert below payload in the Twitter username to mention text field
2. Click on Save Changes
Rutuja D Shirke
2022-01-18 (about 8 months ago)
2022-04-10 (about 5 months ago)