VYPR

Bns Twitter Follow Button

by WordPress

Source repositories

CVEs (2)

  • CVE-2025-47578MedMay 12, 2025
    risk 0.42cvss 6.5epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Edward Caissie BNS Twitter Follow Button bns-twitter-follow-button allows DOM-Based XSS.This issue affects BNS Twitter Follow Button: from n/a through <= 0.3.8.

  • CVE-2024-10116MedNov 23, 2024
    risk 0.42cvss 6.4epss 0.00

    The Twitter Follow Button plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'username' parameter in all versions up to, and including, 0.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with…