Vulnerabilities

TI-2025-33280 CVE-2025-53313 · GHSA-4w32-4qfw-ph73

WordPress Twitch TV Embed Suite plugin <= 2.1.0 - Cross Site Request Forgery (CSRF) Vulnerability

LOW 30

Cross-Site Request Forgery (CSRF) vulnerability in plumwd Twitch TV Embed Suite twitch-tv-embed-suite allows Stored XSS.This issue affects Twitch TV Embed Suite: from n/a through <= 2.1.0.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00123 Published 2025-06-27 No fix listed CWE-352

TI-2025-17327 CVE-2025-23560 · GHSA-8c7w-3jg7-8g56

WordPress Web Testimonials plugin <= 1.2 - CSRF to Stored XSS vulnerability

LOW 31

Cross-Site Request Forgery (CSRF) vulnerability in plumwd Web Testimonials web-testimonials allows Stored XSS.This issue affects Web Testimonials: from n/a through <= 1.2.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00211 Published 2025-01-16 No fix listed CWE-352

TI-2024-35927 CVE-2024-53729 · GHSA-vw9h-3h3h-jf8m

WordPress Blizzard Quotes plugin <= 1.3 - CSRF to Stored Cross Site Scripting (XSS) vulnerability

LOW 30

Cross-Site Request Forgery (CSRF) vulnerability in plumwd Blizzard Quotes blizzard-quotes allows Stored XSS.This issue affects Blizzard Quotes: from n/a through <= 1.3.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00159 Published 2024-12-02 No fix listed CWE-352

Vulnerabilities

Filters

WordPress Twitch TV Embed Suite plugin <= 2.1.0 - Cross Site Request Forgery (CSRF) Vulnerability

WordPress Web Testimonials plugin <= 1.2 - CSRF to Stored XSS vulnerability

WordPress Blizzard Quotes plugin <= 1.3 - CSRF to Stored Cross Site Scripting (XSS) vulnerability