Custom Twitter Feeds – A Tweets Widget or X Feed Widget, CVE-2024-49685
- CVE, Research URL
- Published on
- Oct 31, 2024
- Research Description
- Cross-Site Request Forgery (CSRF) vulnerability in Smash Balloon Custom Twitter Feeds (Tweets Widget) allows Cross Site Request Forgery.This issue affects Custom Twitter Feeds (Tweets Widget): from n/a through 2.2.3.
- Affected versions
-
Min -, max 2.2.4.
- Status
-
vulnerable