CyberSecBulletin

Pay with a tweet vulnerabilities

We track 1 vulnerability in Pay with a tweet products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on November 11, 2026.

1vulnerabilities
1critical
0high
0exploited
9.6average CVSS score

Latest Pay with a tweet vulnerabilities

  • 9.6 Critical severity

    Pay with a tweet: External Control of File Name or Path

    CVE-2026-115734Pay with a tweet

    The Pay with a tweet WordPress plugin through 1.0.5 does not validate a file path before deleting it, nor does it restrict access to the relevant administration screens, allowing users with a role as low as Subscriber to delete arbitrary files on the server, w