wpchill

Records141All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high37CVSS 7.0–8.9

Exploited now

wpchill records in CISA KEV

No wpchill vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Download Monitor 12 records HIGH Strong Testimonials 6 records MEDIUM Modula Image Gallery 5 records MEDIUM Check & Log Email 3 records LOW Passster 3 records LOW Remove Footer Credit 3 records LOW Cpo Shortcodes 2 records LOW Gallery Photoblocks 2 records LOW

Records

6 records in Strong Testimonials · all components

TI-2024-03058 CVE-2024-3261 · GHSA-fcw6-ccq2-f46p

Strong Testimonials < 3.1.12 - Contributor+ Stored XSS

MEDIUM 55

The Strong Testimonials WordPress plugin before 3.1.12 does not validate and escape some of its Testimonial fields before outputting them back in a page/post, which could allow users with the contributor role and above t…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00399 Published 2024-04-24 Fixed in 3.1.12 CWE-79

TI-2024-31680 CVE-2024-47362 · GHSA-3fpf-rc46-9vm6

WordPress Strong Testimonials plugin <= 3.1.16 - Broken Access Control vulnerability

LOW 38

Missing Authorization vulnerability in WP Chill Strong Testimonials strong-testimonials.This issue affects Strong Testimonials: from n/a through <= 3.1.16.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00398 Published 2024-11-01 No fix listed CWE-862

TI-2023-28562 CVE-2023-52123 · GHSA-wqfq-9j6f-q6v9

WordPress Strong Testimonials Plugin <= 3.1.10 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 37

Cross-Site Request Forgery (CSRF) vulnerability in WPChill Strong Testimonials.This issue affects Strong Testimonials: from n/a through 3.1.10.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00227 Published 2024-01-05 No fix listed CWE-352

TI-2020-06850 CVE-2020-8549 · GHSA-4x75-37xv-wgwv

Stored XSS in the Strong Testimonials plugin before 2.40.1 for WordPress can result in an…

LOW 31

Stored XSS in the Strong Testimonials plugin before 2.40.1 for WordPress can result in an attacker performing malicious actions such as stealing session tokens.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01879 Published 2020-02-03 No fix listed CWE-79

TI-2023-11254 CVE-2023-26013 · GHSA-xcg6-cfg8-97xf

WordPress Strong Testimonials Plugin <= 3.0.2 is vulnerable to Cross Site Scripting (XSS)

LOW 29

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in WPChill Strong Testimonials plugin <= 3.0.2 versions.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.0037 Published 2023-06-16 No fix listed CWE-79

TI-2023-05948 CVE-2023-6491 · GHSA-3q9p-8qv6-vmjm

Strong Testimonials <= 3.1.12 - Authenticated(Contributor+) Improper Authorization to Views Modification

LOW 20

The Strong Testimonials plugin for WordPress is vulnerable to unauthorized modification of data due to an improper capability check on the wpmtst_save_view_sticky function in all versions up to, and including, 3.1.12.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0028 Published 2024-06-07 No fix listed CWE-284

Open these records in search →

Critical	3
High	37
Medium	100
Low	1
No CVSS	0