Smashballoon Custom Twitter Feeds — known CVE vulnerabilities

Every CVE whose affected-product data names Smashballoon Custom Twitter Feeds, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2022-33974 — CVSS 5.4 (medium): Cross-Site Request Forgery (CSRF) vulnerability in Smash Balloon Custom Twitter Feeds (Tweets Widget) plugin <= 1.8.4 versions.
• CVE-2024-49685 — CVSS 5.4 (medium): Cross-Site Request Forgery (CSRF) vulnerability in Syed Balkhi Custom Twitter Feeds (Tweets Widget) custom-twitter-feeds allows Cross Site…
• CVE-2024-8983 — CVSS 4.8 (medium): Custom Twitter Feeds WordPress plugin before 2.2.3 does not sanitise and escape some of its settings, which could allow high privilege…
• CVE-2023-52136 — CVSS 4.3 (medium): Cross-Site Request Forgery (CSRF) vulnerability in Smash Balloon Custom Twitter Feeds – A Tweets Widget or X Feed Widget.This issue…
• CVE-2024-0379 — CVSS 4.3 (medium): The Custom Twitter Feeds – A Tweets Widget or X Feed Widget plugin for WordPress is vulnerable to Cross-Site Request Forgery in all…