CVE-2025-11860 | Twitter Feed Plugin up to 1.3.1 on WordPress Shortcode ottwitter_feed width/height cross site scripting

November 10, 2025 Yanac

A vulnerability described as problematic has been identified in Twitter Feed Plugin up to 1.3.1 on WordPress. This issue affects the function ottwitter_feed of the component Shortcode Handler. Such manipulation of the argument width/height leads to cross site scripting.

This vulnerability is uniquely identified as CVE-2025-11860. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More