Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Twitget Project Component: Twitget Clear all filters
TI-2014-02394 CVE-2014-2995 · GHSA-wq59-94fc-9r94

Multiple cross-site scripting (XSS) vulnerabilities in twitget.php in the Twitget plugin…

Priority LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in twitget.php in the Twitget plugin before 3.3.3 for WordPress allow remote authenticated administrators to inject arbitrary web script or HTML via unspecified vectors…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.03577 Published 2014-10-17 No fix listed CWE-79
TI-2014-02053 CVE-2014-2559 · GHSA-6x6h-5999-c5q3

Multiple cross-site request forgery (CSRF) vulnerabilities in twitget.php in the Twitget…

Priority LOW 36

Multiple cross-site request forgery (CSRF) vulnerabilities in twitget.php in the Twitget plugin before 3.3.3 for WordPress allow remote attackers to hijack the authentication of administrators for requests that change un…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.03285 Published 2014-10-17 No fix listed CWE-352