Nextend Twitter Connect
Approved changes feed: RSS · Atom
cpe:2.3:a:nextendweb:nextend_twitter_connect:*:*:*:*:*:wordpress:*:*
part: a version: * update: *
| Vendor | Nextendweb (da1c10d6-feae-5ddb-8d3b-18a68fcd20ef) |
|---|---|
| Product | Nextend Twitter Connect (a54a52b6-5ddc-56a3-8190-5d30a7205e16) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | wordpress |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2015-4557 |
vulnerable | 2026-06-08 05:06:40.200418 |
Details available
Cross-site scripting (XSS) vulnerability in the new_Twitter_sign_button function in nextend-Twitter-connect.php in the Nextend Twitter Connect plugin before 1.5.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the redirect_to parameter. NOTE: this may overlap CVE-2015-4413.
Published: 2018-04-12T15:00:00.000Z
Updated: 2024-08-06T06:18:11.996Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.