plugin

Twitget Vulnerabilities

2 known security issues reported for the Twitget WordPress plugin. Most recent disclosed Apr 11, 2014.

2 medium

Running Twitget on your site? Check whether your installed version is affected.

Scan your site free

Twitget <= 3.3.2 - Stored Cross-Site Scripting

medium

Multiple cross-site scripting (XSS) vulnerabilities in twitget.php in the Twitget plugin before 3.3.3 for WordPress allow remote authenticated administrators to inject arbitrary web script or HTML via unspecified vectors, as demonstrated by the twitget_consumer_key parameter to wp-admin/options-general.php.

CVSS:
5.5
Affected:
up to 3.3.2
Fixed in:
3.3.3
Disclosed:
Apr 11, 2014

CVE-2014-2995 on NVD →

Twitget < 3.3.3 - Cross-Site Request Forgery

medium

Multiple cross-site request forgery (CSRF) vulnerabilities in twitget.php in the Twitget plugin before 3.3.3 for WordPress allow remote attackers to hijack the authentication of administrators for requests that change unspecified plugin options via a request to wp-admin/options-general.php.

CVSS:
6.3
Affected:
up to 3.3.3
Fixed in:
3.3.3
Disclosed:
Apr 8, 2014

CVE-2014-2559 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database