Description
WordPress Plugin TwitterCart is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently send tweets through this plugin. WordPress Plugin TwitterCart version 2.0 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 2.1 or latest
References
https://www.pluginvulnerabilities.com/2017/10/09/tweet-sending-vulnerability-in-twittercart/
https://plugins.svn.wordpress.org/twittercart/trunk/readme.txt
Related Vulnerabilities
WordPress Plugin Advanced Custom Fields (ACF) Cross-Site Scripting (6.1.5)
WordPress Plugin Content Control-User Access Restriction Cross-Site Scripting (1.1.9)
Plone CMS Improper Input Validation Vulnerability (CVE-2013-4195)
Mailman Other Vulnerability (CVE-2006-3636)
Jenkins Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-2058)