Twitch TV Embed Suite
Twitch TV Embed Suite has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 4.3, and the most serious one scores 4.3 out of 10.
The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (100%).
The one issue recorded for Twitch TV Embed Suite has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.
All of these findings were reported by Skalucy. Twitch TV Embed Suite is installed on roughly 80 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 4.5.33.
CVE-2025-53313Twitch TV Embed Suite <= 2.1.0 - Cross-Site Request Forgery
Read the full analysisVulnerability Records

Twitch TV Embed Suite
Author
plumwd
Twitch TV Embed Suite is a plugin that allows for fast and easy embedded of twitch tv stream and chat on your WordPress site. The plugin features an easy to configure settings area that allows the user to preview the stream prior to placement on your site. Specify stream width and height Decide whether or not to show chat Specifiy chat width and height Shortcode Usage To add a stream to your posts, pages, or widgets use the following code. Ensuring you set the Twitch channel name, height, and width if differing from the default settings: [plumwd_twitch_stream channel=”twitchchannelname” height=”400″ width=”600″] To add a stream to your WordPress theme use the following code inside your template: echo do_shortcode('[plumwd_twitch_stream channel="twitchchannelname" height="400" width="600"]'); Shortcode options are: channel – twitch channel name width – width in pixels or percent. If using percent must use % sign. height – height in pixels or percent. If using percent must use % sign. Use the icon from the WYSIWYG editor to insert into a post or page. To add twitch chat to your posts, pages, or widgets use the following code. Ensure you set the Twitch channel name, height, and width like with the stream shortcode. [plumwd_twitch_chat channel=”twitchchannelname” height=”400″ width=”600″] To add chat to your WordPress theme use the following code inside your template: echo do_shortcode('[plumwd_twitch_chat channel="twitchchannelname" height="400" width="600"]'); Shortcode options are: channel – twitch channel name width – width in pixels or percent. If using percent must use % sign. height – height in pixels or percent. If using percent must use % sign. Use the icon from the WYSIWYG editor to insert into a post or page. 1.To add a Twitch TV stream list to your posts, pages, or widgets use the following shortcode: [plumwd_twitch_streamlist channel=”twitchchannelname” display=”vertical” videonum=”5″] 2. To add the Twitch TV stream plugin to your WordPress theme use the following shortcode inside your template: echo do_shortcode(‘[plumwd_twitch_streamlist channel=”twitchchannelname” display=”vertical” videonum=”5″]’); The plugin also supports several attributes for the shortcode, below is a listing of the attributes and what their purpose is: channel -> this must be set or the feed will not display. Usage: [plumwd_twitch_streamlist channel=”plumwd”] videonum -> The number of streams to display. Will return the most recent streams in order from newest to oldest. Usage: [plumwd_twitch_display channel=”plumwd” videonum=”4″] display -> accepts two different options: horizontal or vertical. Usage: [plumwd_twitch_streamlist channel=”plumwd” display=”horizonal”]
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C