Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: nik00726 Component: Easy Testimonial Slider And Form Clear all filters
TI-2015-08075 CVE-2015-10147 · GHSA-9vm5-3w25-78p5

Easy Testimonial Slider and Form <= 1.0.2 - Authenticated (Admin+) SQL injection

Priority LOW 22

The Easy Testimonial Slider and Form plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all versions up to, and including, 1.0.2 due to insufficient escaping on the user supplied parameter and…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00296 Published 2025-10-29 No fix listed CWE-89
TI-2023-24528 CVE-2023-45754 · GHSA-9rvp-jg33-mp8v

WordPress Easy Testimonial Slider and Form Plugin <= 1.0.18 is vulnerable to Cross Site Scripting (XSS)

Priority LOW 27

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in I Thirteen Web Solution Easy Testimonial Slider and Form allows Stored XSS.This issue affects Easy Testimonial Slider…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00509 Published 2023-10-24 No fix listed CWE-79