WordPress security by component

WD WidgetTwitter

Plugin description

WD WidgetTwitter is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Nov 07, 2023; the highest CVE/CNA score is 8.8.

Plugin slug: widget-twitter

Latest vulnerability

CVE-2023-5709: WD WidgetTwitter: SQL injection

WD WidgetTwitter is affected by SQL injection. Exploitation requires an authenticated WordPress account. A successful request can alter database queries and expose or modify WordPress data.

PublishedNov 07, 2023

Safe version guidanceSee mitigation notes

		Safe version
Nov 07, 2023	CVE-2023-5709 WD WidgetTwitter: SQL injection WD WidgetTwitter is affected by SQL injection. Exploitation requires an authenticated WordPress account. A successful request can alter database queries and expose or modify WordPress data.	See mitigation notes	CVE8.8 NVD6.5