CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
What the vulnerability does
Cross-Site Request Forgery (CSRF) vulnerability in Syed Balkhi Custom Twitter Feeds (Tweets Widget) custom-twitter-feeds allows Cross Site Request Forgery.This issue affects Custom Twitter Feeds (Tweets Widget): from n/a through <= 2.2.3.
Explanation of Vulnerability in Simple Terms
Custom Twitter Feeds (Tweets Widget) versions 2.2.3 and earlier are vulnerable to cross-site request forgery (CSRF). An attacker can craft a malicious link or page that, when visited by a logged-in site administrator, performs unwanted actions on the site without the admin's knowledge or consent. This could allow modification of plugin settings or other administrative functions.
What an attacker can do
Perform unwanted administrative actions on the site by tricking a logged-in admin into visiting a malicious page.
Potential impact on your site
An attacker could modify plugin settings or perform other admin actions without your permission if you click a malicious link.
Conditions required to exploit
A site administrator must visit a malicious link or page while logged into WordPress.
Key dates
External resources
Related vulnerabilities
