First published: Mon May 29 2023(Updated: )
Cross-Site Request Forgery (CSRF) vulnerability in Smash Balloon Custom Twitter Feeds (Tweets Widget) plugin <= 1.8.4 versions.
Credit: audit@patchstack.com
Affected Software | Affected Version | How to fix |
---|---|---|
Smashballoon Custom Twitter Feeds | <=1.8.4 |
Update to 2.0 or a higher version.
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The CVE ID for this vulnerability is CVE-2022-33974.
The title of this vulnerability is Cross-Site Request Forgery (CSRF) vulnerability in Smash Balloon Custom Twitter Feeds (Tweets Widget).
The severity of CVE-2022-33974 is high with a severity value of 8.8.
The Smash Balloon Custom Twitter Feeds (Tweets Widget) plugin <= 1.8.4 versions are affected by this vulnerability.
To fix CVE-2022-33974, update the Smash Balloon Custom Twitter Feeds (Tweets Widget) plugin to version 1.8.5 or higher.