Dyiosah vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Dyiosah products: 1 record(s), with severity, exploitation and fixes.

Ultimate twitter profile widget 1

Exploited only (KEV) →

CVE-2025-48321 High · 7.1 CWE-352 Aug 28, 2025

WordPress Ultimate twitter profile widget plugin <= 1.0 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery (CSRF) vulnerability in dyiosah Ultimate twitter profile widget ultimate-twitter-profile-widget allows Stored XSS.This issue affects Ultimate twitter profile widget: from n/a through <= 1.0.