Custom Twitter Feeds – A Tweets Widget or X Feed Widget

84 Quality Score

Active Installs

23/30

With 100,000 active installs and a popularity score well above its weight class, this plugin has clear traction in the WordPress community.

Update Freshness

25/25

A last update date of June 2026 and full maintenance marks indicate the developer is actively shipping code, which is reassuring for a plugin tied to a frequently changing third-party platform like X.

User Rating

14/15

A 96 out of 100 rating across 400 reviews is genuinely strong and suggests most users get what they expect without friction.

Support Health

8/15

A support health score of 50 with zero resolved threads in the tracked period is a real weakness; if you run into trouble, paid support or community forums will likely be your faster path than the plugin's own threads.

WP Compatibility

15/15

Tested with WordPress 7.0 and requiring PHP 7.4, the plugin is current with modern WordPress and PHP environments, which is a positive signal.

Scores higher than 94% of indexed plugins

About

Display X posts (Twitter tweets) from any public user account in a clean, attractive looking feed that updates weekly.

Active Installs 100k+

Rating ★★★★½ 4.8/5

Last Updated 2026-09-14 5:32pm GMT

Requires WordPress 5.3+

Tested Up To 7.1

Requires PHP 7.4+

Security History

9 known vulnerabilities, all patched

1 High 8 Medium

Most recent: September 17, 2026

View details ▸

Custom Twitter Feeds <= 2.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'buttoncolor' Shortcode Attribute Medium

September 17, 2026 Patched in ["2.9.0"] CVE-2026-84909

Custom Twitter Feeds <= 2.5.4 - Unauthenticated Stored Cross-Site Scripting via Cached Tweet Text High

May 12, 2026 Patched in ["2.5.5"] CVE-2026-6177

Custom Twitter Feeds <= 2.2.5 - Cross-Site Request Forgery to Cache Reset via ctf_clear_cache_admin Function Medium

March 19, 2025 Patched in ["2.3.0"] CVE-2025-1314

Custom Twitter Feeds (Tweets Widget) <= 2.2.3 - Cross-Site Request Forgery Medium

October 21, 2024 Patched in ["2.2.4"] CVE-2024-49685

Custom Twitter Feeds – A Tweets Widget or X Feed Widget <= 2.2.2 - Authenticated (Admin+) Stored Cross-Site Scripting Medium

September 17, 2024 Patched in ["2.2.3"] CVE-2024-8983

Custom Twitter Feeds – A Tweets Widget or X Feed Widget <= 2.2.1 - Cross-Site Request Forgery to Plugin Options Update Medium

February 6, 2024 Patched in ["2.2.2"] CVE-2024-0379

Custom Twitter Feeds (Tweets Widget) <= 2.1.2 - Cross-Site Request Forgery Medium

December 28, 2023 Patched in ["2.2"] CVE-2023-52136

Custom Twitter Feeds (Tweets Widget) <= 1.8.4 - Cross-Site Request Forgery Medium

May 25, 2023 Patched in ["2.0"] CVE-2022-33974

Smash Balloon Plugins (Various Versions) - Reflected Cross-Site Scripting Medium

July 20, 2021 Patched in ["1.8.2"]

What It Does

Custom Twitter Feeds embeds public X (formerly Twitter) posts from any public account directly into your WordPress site as a styled widget or shortcode block. Feeds are fetched and refreshed weekly, which keeps your site showing fresh content without the need for API key configuration in most cases. It handles avatars, timestamps, media attachments, and responsive layout out of the box.

Who It's For

This plugin is a solid fit for small businesses, personal brands, news sites, and event promoters who want a low-maintenance way to surface their own X feed (or a public feed they curate) on their homepage, sidebar, or landing pages. It works best for site owners who do not need real-time tweet updates and who prefer a set-and-forget approach over configuring X API credentials.

Who Should Skip It

If you need real-time tweet streaming, hashtag or list feeds, or full Twitter API v2 search functionality, this plugin will feel too limited. Developers and agencies building heavily customized social hubs should also look at alternatives that expose more hooks and API endpoints.

The Bottom Line

Custom Twitter Feeds is a dependable, well-rated choice for site owners who want an easy embedded X feed without wrestling with API tokens, and its 100,000 installs and 96/100 rating back that up. The weekly refresh cadence and lack of robust support threads are the main caveats, so buyers who need real-time updates or hands-on help should temper expectations. Overall Quality Score of 84.29/100 places it firmly in the recommended range for its intended use case.

Pick this instead if your goal is social login and registration rather than displaying an X feed on the front end.

Easy Social Feed – Social Photos Gallery and Post Feed for WordPress 81/100

Choose this if you need multi-network feeds (Facebook, Instagram, YouTube) from a single plugin rather than X-only.

Autopost for X (formerly Autoshare for Twitter) 79/100

Choose this instead if you want to auto-publish WordPress posts to X rather than embed an X feed on your site.

WP Review Slider 79/100

Pick this if your social proof goal is displaying Facebook reviews and testimonials rather than live X posts.

WP Twitter Auto Publish 78/100

Choose this if you only need outbound auto-sharing to X and do not want to display any embedded feed.