Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: RadiusTheme Component: Testimonial Slider And Showcase Clear all filters
TI-2024-01624 CVE-2024-1746 · GHSA-9x83-3j29-pjf2

Testimonial Slider < 2.3.8 - Admin+ Stored XSS

Priority LOW 25

The Testimonial Slider WordPress plugin before 2.3.8 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the un…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00442 Published 2024-04-15 Fixed in 2.3.8 CWE-79
TI-2024-01623 CVE-2024-1745 · GHSA-pvv2-pfhc-r8pq

Testimonial Slider < 2.3.7 - Author+ Settings Update

Priority MEDIUM 53

The Testimonial Slider WordPress plugin before 2.3.7 does not properly ensure that a user has the necessary capabilities to edit certain sensitive Testimonial Slider WordPress plugin before 2.3.7 settings, making it poss…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00381 Published 2024-03-26 Fixed in 2.3.7