Ultimate twitter profile widget
Ultimate twitter profile widget has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 4.3, and the most serious one scores 4.3 out of 10.
The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (100%).
The one issue recorded for Ultimate twitter profile widget has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.
All of these findings were reported by Nguyen Xuan Chien. Ultimate twitter profile widget is installed on roughly 70 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 3.4.2.
CVE-2025-48321Ultimate twitter profile widget <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Read the full analysisVulnerability Records
Ultimate twitter profile widget
Author
dyiosah
twitter profile widgetWidget. Plugin shows your tweets on Page/Post/Widget area. This plugin shows your twitter tweets under Sidebar Area (Widget), Post and/or Pages. It has also a feature that automatically refresh latest tweets. Also it has reply option inside widget on mouse over action. Admin panel option available under” Settings -> Ultimate Twitter Profile Widget” to set different color combination and twitter widget options. Tags: twitter, twit, tweet, tweets, twitter widget, dynamic twitter widget, auto refresh tweet, twitter profile widget, sidebar twitter, twitter sidebar, twitter, twitter post, twitter tools, best twitter, Original Tweet profil, WP Tweet
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C