← Database

CVE-2022-33974

MEDIUM CVSS: 5.4 Published: 2023-05-29 Modified: 2026-06-17

Description

Cross-Site Request Forgery (CSRF) vulnerability in Smash Balloon Custom Twitter Feeds (Tweets Widget) plugin <= 1.8.4 versions.

Affected Platforms

Smashballoon Custom Twitter Feeds

Weakness Type

CWE-352

References