A vulnerability was found in smub Custom Twitter Feeds Plugin up to 2.5.4 on WordPress. It has been declared as problematic. Affected is the function
CTF_Display_Elements::get_post_text. The manipulation results in cross site scripting.
This vulnerability is identified as CVE-2026-6177. The attack can be executed remotely. There is not any exploit available.