WordPress plugin
iTwitter security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical0
- High0
- Medium1
- Low0
All iTwitter vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium6.1 | Cross-Site Scripting ≤0.04No patch available | CVE-2014-9336 |
- Medium6.1Cross-Site Scripting
≤0.04No patch available
iTwitter: common questions
Does iTwitter have known vulnerabilities?
Yes. VulnCrest Radar lists 1 known vulnerability in iTwitter: 1 medium. At least one is not fixed in the latest version.
How do I check which version of iTwitter I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent iTwitter vulnerability?
CVE-2014-9336, published Dec 15, 2014: iTwitter <= 0.04 - Cross-Site Scripting. Severity: Medium (CVSS 6.1).
Is any iTwitter vulnerability listed in CISA KEV?
No. None of the known iTwitter vulnerabilities is currently listed in the CISA KEV catalog.