CVE-2026-84909 | smub Custom Twitter Feeds Plugin up to 2.8.0 on WordPress Shortcode buttoncolor cross site scripting

September 18, 2026 Yanac

A vulnerability has been found in smub Custom Twitter Feeds Plugin up to 2.8.0 on WordPress and classified as problematic. This issue affects some unknown processing of the component Shortcode Handler. This manipulation of the argument buttoncolor causes cross site scripting.

The identification of this vulnerability is CVE-2026-84909. It is possible to initiate the attack remotely. There is no exploit available.VulDB Recent EntriesRead More