Threat Entry Updated 2026-06-17

CVE-2026-53736 - Easy Twitter Feeds Plugin

Easy Twitter Feeds before 1.2.13 contains a cross-site request forgery vulnerability in the duplicate_post action handler that lacks nonce verification. Attackers can trick an authenticated user into visiting a crafted link that duplicates any post regardless of post type.

PLUGIN Easy Twitter Feeds

CVE-2026-53736

MEDIUM CVSS 5.1 2026-06-10

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2024-11-22

CVE-2024-10666 - Easy Twitter Feeds Plugin

The Easy Twitter Feed – Twitter feeds plugin for WP plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.2.6 via the [etf] shortcode. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract data from password protected, private, or draft posts that they should not have access to.

PLUGIN Easy Twitter Feeds

CVE-2024-10666

MEDIUM CVSS 4.3 2024-11-22

Risk Score

Open Full Technical Breakdown