blogsafe.org My Downloads

BlogSafe.org

WordPress CVEs

Search and review WordPress-related vulnerability records.

← Back to CVE list

CVE-2012-10015

HIGH 8.8 CVSS 3.1
Published
May 31, 2023
Last modified
June 16, 2026
NVD status
Modified
Reported by
cna@vuldb.com
Weakness
CWE-352
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

A vulnerability was found in BestWebSoft Twitter Plugin up to 2.14 on WordPress. It has been classified as problematic. Affected is the function twttr_settings_page of the file twitter.php of the component Settings Page. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. Upgrading to version 2.15 is able to address this issue. The patch is identified as a6d4659cbb2cbf18ccb0fb43549d5113d74e0146. It is recommended to upgrade the affected component. VDB-230154 is the identifier assigned to this vulnerability.

Affected WordPress components

  • Twitter Plugin · twitter
    Confirmed match Abandoned
    Before 2.15
    View on WordPress.org
  • BestWebSoft's Twitter Plugin · twitter-plugin
    Confirmed match Abandoned
    Version 2.1; Version 2.11; Version 2.2; Version 2.10; Version 2.3; Version 2.6; Version 2.14; Version 2.0; Version 2.4; Version 2.9; Version 2.8; Version 2.13; Version 2.5; Version 2.7; Version 2.12
    View on WordPress.org

A confirmed match is backed by the plugin or theme slug. A possible match is based on the product name only and should be verified.

Affected products and versions

  • BestWebSoft Twitter Plugin — Version 2.0
  • BestWebSoft Twitter Plugin — Version 2.1
  • BestWebSoft Twitter Plugin — Version 2.2
  • BestWebSoft Twitter Plugin — Version 2.3
  • BestWebSoft Twitter Plugin — Version 2.4
  • BestWebSoft Twitter Plugin — Version 2.5
  • BestWebSoft Twitter Plugin — Version 2.6
  • BestWebSoft Twitter Plugin — Version 2.7
  • BestWebSoft Twitter Plugin — Version 2.8
  • BestWebSoft Twitter Plugin — Version 2.9
  • BestWebSoft Twitter Plugin — Version 2.10
  • BestWebSoft Twitter Plugin — Version 2.11
  • BestWebSoft Twitter Plugin — Version 2.12
  • BestWebSoft Twitter Plugin — Version 2.13
  • BestWebSoft Twitter Plugin — Version 2.14
  • bestwebsoft twitter — Before 2.15

References

  • github.com https://github.com/wp-plugins/twitter-plugin/commit/a6d4659cbb2cbf18ccb0fb43549d5113d74e0146 Patch
  • vuldb.com https://vuldb.com/?ctiid.230154 Permissions Required, Third Party Advisory
  • vuldb.com https://vuldb.com/?id.230154 Third Party Advisory
  • nvd.nist.gov Official NVD record