Q8Critic

#18304of 53,635

14.9Total CVSS

Vulnerabilities · 2

Medium

1

High

1

WordPress · Twitter-Cards-Meta · CVE-2017-18503

**Name of the Vulnerable Software and Affected Versions** twitter-cards-meta plugin versions prior to 2.5.0 **Description** The issue is related to a cross-site scripting (XSS) problem. **Recommendations** For versions prior to 2.5.0, update to version 2.5.0 or later to resolve the issue.

WordPress · Twitter-Cards-Meta · CVE-2017-18504

**Name of the Vulnerable Software and Affected Versions** twitter-cards-meta plugin versions prior to 2.5.0 **Description** The issue concerns a CSRF problem. **Recommendations** For versions prior to 2.5.0, update to version 2.5.0 or later to resolve the issue.