Many third-party applications give users the option to sign in using their Twitter or Facebook accounts. However, the application did not allow the application to access my Twitter direct messages. It was a simple trick for third party applications to obtain access to my Twitter and Facebook accounts without being signed in. The application was able to read and post Tweets from my Twitter account without having to be logged in to the application. It did not have access to any of my private messages, but it could have been accessed by the application itself.”]
Source: https://ioactive.com/you-can-not-trust-social-media-twitter-vulnerable/