Vulnerabilities / Custom Twitter Feeds
Custom Twitter Feeds vulnerabilities
Advisories WPSec published for Custom Twitter Feeds – A Tweets Widget or X Feed Widget. Other sources may list more. Its attack surface: Custom Twitter Feeds on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-11-03 | WPSEC-2026-2389 | Custom Twitter Feeds <= 2.11.0 - Unauthenticated Stored Cross-Site Scripting via 'atts' Parameter | High 7.2 | 2.11.1 |
License: CC BY 4.0