Vulnerabilities

TI-2024-17024 CVE-2024-25924 · GHSA-7jxv-w3wx-fc48

WordPress WP Testimonials plugin <= 1.4.3 - Auth. SQL Injection vulnerability

LOW 34

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Trustindex.Io WP Testimonials.This issue affects WP Testimonials: from n/a through 1.4.3.

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.00547 Published 2024-03-28 No fix listed CWE-89

TI-2023-26138 CVE-2023-48275 · GHSA-pw27-mh42-723p

WordPress Widgets for Google Reviews plugin <= 11.0.2 - Arbitrary File Upload vulnerability

LOW 38

Unrestricted Upload of File with Dangerous Type vulnerability in Trustindex.Io Widgets for Google Reviews.This issue affects Widgets for Google Reviews: from n/a through 11.0.2.

CVSS 3.1HIGH 8.0 Network High privileges No interaction EPSS 0.00535 Published 2024-03-26 No fix listed CWE-434

Vulnerabilities

Filters

WordPress WP Testimonials plugin <= 1.4.3 - Auth. SQL Injection vulnerability

WordPress Widgets for Google Reviews plugin <= 11.0.2 - Arbitrary File Upload vulnerability