Vulnerabilities

TI-2022-22030 CVE-2022-44741 · GHSA-vghr-3cp4-r28v

WordPress Testimonial Slider plugin <= 1.3.1 - Cross-Site Request Forgery (CSRF) vulnerability

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability leading to Cross-Site Scripting (XSS) in David Anderson Testimonial Slider plugin <= 1.3.1 on WordPress.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00401 Published 2022-11-08 No fix listed CWE-352

TI-2015-07794 CVE-2015-9417 · GHSA-r45j-hxvq-fmm8

The testimonial-slider plugin through 1.2.1 for WordPress has CSRF with resultant XSS.

LOW 30

The testimonial-slider plugin through 1.2.1 for WordPress has CSRF with resultant XSS.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00673 Published 2019-09-25 No fix listed CWE-352

TI-2018-03905 CVE-2018-5372 · GHSA-6p7h-vrv8-3844

The Testimonial Slider plugin through 1.2.4 for WordPress has SQL Injection via…

MEDIUM 40

The Testimonial Slider plugin through 1.2.4 for WordPress has SQL Injection via settings\sliders.php (current_slider_id parameter).

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01202 Published 2018-01-12 No fix listed CWE-89

Vulnerabilities

Filters

WordPress Testimonial Slider plugin <= 1.3.1 - Cross-Site Request Forgery (CSRF) vulnerability

The testimonial-slider plugin through 1.2.1 for WordPress has CSRF with resultant XSS.

The Testimonial Slider plugin through 1.2.4 for WordPress has SQL Injection via…