CVE-2023-52136
Cross-Site Request Forgery (CSRF) vulnerability in Smash Balloon Custom Twitter Feeds – A Tweets Widget or X Feed Widget.This issue affects Custom Twitter Feeds – A Tweets Widget or X Feed Widget: from n/a through 2.1.2.
- Score
- CVSS 3.1 8.8 High
- Status
- Modified - audit@patchstack.com
- Published
- 2024-01-05
- Last modified
- 2026-04-28
- Weaknesses
- CWE-352
Affected products
- Custom Twitter Feeds A Tweets Widget Or X Feed Widget (Smash Balloon)
- Custom Twitter Feeds (Smashballoon)
References
- https://patchstack.com/database/vulnerability/custom-twitter-feeds/wordpress-custom-twitter-feeds-tweets-widget-plugin-…
