PT-2023-9952 · Bestwebsoft · Bestwebsoft Twitter Plugin

Published 2023-05-30 · Updated 2024-05-17 · CVE-2012-10015

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions BestWebSoft Twitter Plugin versions up to 2.14

Description A problematic issue has been found, affecting the twttr settings page function of the twitter.php file in the Settings Page component. This issue leads to cross-site request forgery and can be launched remotely.

Recommendations For BestWebSoft Twitter Plugin versions up to 2.14, upgrade to version 2.15 to address this issue.

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2012-10015

Affected Products

Bestwebsoft Twitter Plugin

References · 4

• https://github.com/wp-plugins/twitter-plugin/commit/a6d4659cbb2cbf18ccb0fb43549d5113d74e0146 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2012-10015 · Security Note
• https://vuldb.com/?id.230154 · Note
• https://vuldb.com/?ctiid.230154 · Note