Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

Custom Twitter Feeds – A Tweets Widget or X Feed Widget — Vulnerabilities & Security Advisories 4

All 4 CVE vulnerabilities found in Custom Twitter Feeds – A Tweets Widget or X Feed Widget, with AI-generated Chinese analysis, references, and POCs.

Vendor: Smash Balloon

CVE IDTitleCVSSSeverityPublished
CVE-2026-6177 Custom Twitter Feeds <= 2.5.4 - Unauthenticated Stored Cross-Site Scripting via Cached Tweet Text CWE-79 7.2 High2026-05-13
CVE-2025-1314 Custom Twitter Feeds <= 2.2.5 - Cross-Site Request Forgery to Cache Reset via ctf_clear_cache_admin Function CWE-352 4.3 Medium2025-03-20
CVE-2024-0379 Custom Twitter Feeds – A Tweets Widget or X Feed Widget <= 2.2.1 - Cross-Site Request Forgery to Plugin Options Update CWE-352 4.3 Medium2024-02-20
CVE-2023-52136 WordPress Custom Twitter Feeds (Tweets Widget) Plugin <= 2.1.2 is vulnerable to Cross Site Request Forgery (CSRF) CWE-352 4.3 Medium2024-01-05

All 4 known CVE vulnerabilities affecting Custom Twitter Feeds – A Tweets Widget or X Feed Widget with full Chinese analysis, references, and POCs where available.