Read the docs

Web-Settler

Records12All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Web-Settler records in CISA KEV

No Web-Settler vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Form Builder 3 records MEDIUM Layer Slider 3 records LOW Custom Login Page Styler 1 record LOW Image Social Feed 1 record LOW Social Feed 1 record LOW Social Feed | All Social Media In One Place 1 record LOW Testimonial Slider 1 record LOW

Records

1 record in Testimonial Slider · all components

TI-2021-14949 CVE-2021-36851 · GHSA-rjq3-c2jr-r9rq

WordPress Testimonial Slider plugin <= 3.5.8.3 - Cross-Site Scripting (XSS) vulnerability

Priority LOW 25

Authenticated (editor or higher user role) Cross-Site Scripting (XSS) vulnerability in Web-Settler Testimonial Slider – Free Testimonials Slider Plugin (WordPress plugin) via parameters mpsp_posts_bg_color, mpsp_posts_de…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00566 Published 2022-04-04 No fix listed CWE-79
Open these records in search →