PT-2025-21388 · WordPress · Twitterposts

Daniel Ruf · Published 2025-05-15 · Updated 2025-11-13 · CVE-2023-7297

Positive Technologies (AI Summary)

CVSS v3.1

3.5

Low

Base vector

AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions: TwitterPosts WordPress plugin versions 1.0.0 through 1.0.2

Description: The issue is related to the lack of a CSRF check when updating settings, which could allow attackers to make a logged-in admin change them via a CSRF attack.

Recommendations: For TwitterPosts WordPress plugin versions 1.0.0 through 1.0.2, consider disabling the settings update functionality until a patch is available. Restrict access to the settings update module to minimize the risk of exploitation. Avoid using the plugin's settings update feature until the issue is resolved.

Exploit

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2023-7297

Affected Products

Twitterposts

References · 6

• 🔥 https://wpscan.com/vulnerability/3632dfa1-2948-4622-a8fd-31edb8b22383 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-7297 · Security Note
• https://osv.dev/vulnerability/CVE-2023-7297 · Vendor Advisory
• https://t.me/cvenotify/125136 · Telegram Post
• https://t.me/cveNotify/142736 · Telegram Post
• https://twitter.com/CVEnew/status/1923115370098884785 · Twitter Post