TI-2023-06667 CVE-2023-7297 · GHSA-7rv8-qgm5-32crTwitterPosts <= 1.0.2 - Settings Update via CSRFPriority MEDIUM 50The TwitterPosts WordPress plugin through 1.0.2 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attackCVSS 3.1LOW 3.5· Network · High privileges · User interaction · EPSS 0.00201 · Published 2025-05-15 · No fix listed CWE-352