The Simple Tweet plugin for WordPress is not secure in versions up to, and including, 1.4.0.2. An attacker with administrative-level access and above could inject malicious web scripts into pages and cause them to execute whenever someone visits them. This security issue only affects WordPress multisite installations and installations where unfiltered_html has been disabled.
This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!
Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:
> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21
Is this information incorrect? Please leave us a message.
