Hl Twitter (Unknown) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2024-05-15. Vendor: Unknown.

CVEs of Hl Twitter

• CVE-2024-3631 - CVSS 4.3 (medium), 2024-05-15: The HL Twitter WordPress plugin through 2014.1.18 does not have CSRF check when unlinking twitter accounts, which could allow attackers to make logged in…
• CVE-2024-3630 - CVSS 5.4 (medium), 2024-05-15: The HL Twitter WordPress plugin through 2014.1.18 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to…
• CVE-2024-3629 - CVSS 2.4 (low), 2024-05-15: The HL Twitter WordPress plugin through 2014.1.18 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged…