Description
Cross-Site Request Forgery (CSRF) vulnerability in Smash Balloon Custom Twitter Feeds (Tweets Widget) plugin <= 1.8.4 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Smash Balloon | Custom Twitter Feeds (Tweets Widget) | ≤ 1.8.4 | — |
Medium · 5.4
CVE-2022-33974
EUVD-2022-37010GHSA-65f8-8xrr-5v68
WordPress Custom Twitter Feeds (Tweets Widget) Plugin <= 1.8.4 is vulnerable to Cross Site Request Forgery (CSRF)
Published May 29, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack