CyberSecBulletin

Plumwd vulnerabilities

We track 3 vulnerabilities in Plumwd products across 3 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on June 27, 2025.

3vulnerabilities
0critical
3high
0exploited
7.1average CVSS score

Latest Plumwd vulnerabilities

  • 7.1 High severity

    Twitch TV Embed Suite: Cross-Site Request Forgery

    CVE-2025-53313Plumwd

    Cross-Site Request Forgery (CSRF) vulnerability in plumwd Twitch TV Embed Suite twitch-tv-embed-suite allows Stored XSS.This issue affects Twitch TV Embed Suite: from n/a through <= 2.1.0.

  • 7.1 High severity

    Web Testimonials: Cross-Site Request Forgery

    CVE-2025-23560Plumwd

    Cross-Site Request Forgery (CSRF) vulnerability in plumwd Web Testimonials web-testimonials allows Stored XSS.This issue affects Web Testimonials: from n/a through <= 1.2.

  • 7.1 High severity

    Blizzard Quotes: Cross-Site Request Forgery

    CVE-2024-53729Plumwd

    Cross-Site Request Forgery (CSRF) vulnerability in plumwd Blizzard Quotes blizzard-quotes allows Stored XSS.This issue affects Blizzard Quotes: from n/a through <= 1.3.