5.4
Medium
CVE-2022-33974 Cross-Site Request Forgery (CSRF) vulnerability in Smash Balloon Custom Twitter Feeds (Tweets Widget)…
Description
Cross-Site Request Forgery (CSRF) vulnerability in Smash Balloon Custom Twitter Feeds (Tweets Widget) plugin <= 1.8.4 versions.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Custom Twitter Feeds (Tweets Widget) 1.8 | earliest → 1.8.4 | No fix stated |