Custom Twitter Feeds – A Tweets Widget or X Feed Widget vulnerabilities

1 known vulnerability in Custom Twitter Feeds – A Tweets Widget or X Feed Widget from Smub. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  Custom Twitter Feeds – A Tweets Widget or X…: Improper Neutralization of Input During Web Page Generation

  CVE-2026-6177May 13, 2026Smub

  The Custom Twitter Feeds plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to and including 2.5.4. This is due to insufficient output escaping in the CTF_Display_Elements::get_post_text() function when rendering cached tweet text