Read the docs

Stark Digital

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Stark Digital records in CISA KEV

No Stark Digital vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Wp Testimonial Widget 3 records LOW Category Post List Widget 1 record LOW

Records

3 records in Wp Testimonial Widget · all components

TI-2024-29555 CVE-2024-43966 · GHSA-25gm-jxwr-cv79

WordPress WP Testimonial Widget plugin <= 3.1 - SQL Injection vulnerability

Priority LOW 34

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Stark Digital WP Testimonial Widget.This issue affects WP Testimonial Widget: from n/a through 3.1.

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.00439 Published 2024-08-26 No fix listed CWE-89
TI-2024-29556 CVE-2024-43967 · GHSA-f486-3qch-c5jm

WordPress WP Testimonial Widget plugin <= 3.1 - Cross Site Scripting (XSS) vulnerability

Priority LOW 26

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Stark Digital WP Testimonial Widget allows Stored XSS.This issue affects WP Testimonial Widget: from n/a throug…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00276 Published 2024-08-26 No fix listed CWE-79
TI-2024-06850 CVE-2024-7390 · GHSA-rrfp-vv85-pxq9

WP Testimonial Widget <= 3.1 - Missing Authorization

Priority LOW 24

The WP Testimonial Widget plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the fnSaveTestimonailOrder function in all versions up to, and including, 3.1.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00336 Published 2024-08-21 No fix listed CWE-862
Open these records in search →