What’s Vulnerable › Products

smub Custom Twitter Feeds – A Tweets Widget or X Feed Widget vulnerabilities

8 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your smub Custom Twitter Feeds – A Tweets Widget or X Feed Widget version is affected

Latest smub Custom Twitter Feeds – A Tweets Widget or X Feed Widget vulnerabilities

• CVE-2026-84909 — Custom Twitter Feeds <= 2.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'buttoncolor' Shortcode Attribute (CVSS 6.4)
• CVE-2026-6177 — Custom Twitter Feeds <= 2.5.4 - Unauthenticated Stored Cross-Site Scripting via Cached Tweet Text (CVSS 7.2)
• CVE-2025-1314 — Custom Twitter Feeds <= 2.2.5 - Cross-Site Request Forgery to Cache Reset via ctf_clear_cache_admin Function (CVSS 4.3)
• CVE-2024-49685 — WordPress Custom Twitter Feeds plugin <= 2.2.3 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 8.8)
• CVE-2024-8983 — Custom Twitter Feeds < 2.2.3 - Admin+ Stored XSS (CVSS 4.8)
• CVE-2024-0379 — Custom Twitter Feeds – A Tweets Widget or X Feed Widget <= 2.2.1 - Cross-Site Request Forgery to Plugin Options Update (CVSS 4.3)
• CVE-2023-52136 — WordPress Custom Twitter Feeds (Tweets Widget) Plugin <= 2.1.2 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 8.8)
• CVE-2022-33974 — WordPress Custom Twitter Feeds (Tweets Widget) Plugin <= 1.8.4 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 8.8)