Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Stark Digital Clear all filters
TI-2024-29556 CVE-2024-43967 · GHSA-f486-3qch-c5jm

WordPress WP Testimonial Widget plugin <= 3.1 - Cross Site Scripting (XSS) vulnerability

Priority LOW 26

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Stark Digital WP Testimonial Widget allows Stored XSS.This issue affects WP Testimonial Widget: from n/a throug…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00276 Published 2024-08-26 No fix listed CWE-79
TI-2024-29555 CVE-2024-43966 · GHSA-25gm-jxwr-cv79

WordPress WP Testimonial Widget plugin <= 3.1 - SQL Injection vulnerability

Priority LOW 34

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Stark Digital WP Testimonial Widget.This issue affects WP Testimonial Widget: from n/a through 3.1.

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.00439 Published 2024-08-26 No fix listed CWE-89
TI-2024-06850 CVE-2024-7390 · GHSA-rrfp-vv85-pxq9

WP Testimonial Widget <= 3.1 - Missing Authorization

Priority LOW 24

The WP Testimonial Widget plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the fnSaveTestimonailOrder function in all versions up to, and including, 3.1.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00336 Published 2024-08-21 No fix listed CWE-862