Approved changes feed: RSS · Atom

cpe:2.3:a:slidervilla:testimonial_slider:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

VendorSlidervilla (409a7e44-d2cb-506b-8629-aba2318c5e7c)
ProductTestimonial Slider (7ebf12f0-20da-5447-bb1e-5dd8399acc24)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/wp-plugins/testimonial-slider purl2cpe 2026-06-01 10:17:29.464396

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-1745 vulnerable 2026-06-08 06:27:14.380172 Testimonial Slider < 2.3.7 - Author+ Settings Update
The Testimonial Slider WordPress plugin before 2.3.7 does not properly ensure that a user has the necessary capabilities to edit certain sensitive Testimonial Slider WordPress plugin before 2.3.7 settings, making it possible for users with at least the Author role to edit them.
Published: 2024-03-26T05:00:02.299Z
Updated: 2024-08-05T18:36:56.611Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-44741 vulnerable 2026-06-08 05:49:36.318413 WordPress Testimonial Slider plugin <= 1.3.1 - Cross-Site Request Forgery (CSRF) vulnerability
MEDIUM (6.1)
Cross-Site Request Forgery (CSRF) vulnerability leading to Cross-Site Scripting (XSS) in David Anderson Testimonial Slider plugin <= 1.3.1 on WordPress.
Published: 2022-11-08T18:36:33.552Z
Updated: 2026-04-28T16:07:51.665Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-5372 vulnerable 2026-06-08 05:11:50.681295 Details available
The Testimonial Slider plugin through 1.2.4 for WordPress has SQL Injection via settings\sliders.php (current_slider_id parameter).
Published: 2018-01-12T09:00:00.000Z
Updated: 2024-08-05T05:33:44.188Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-9417 vulnerable 2026-06-08 05:07:13.675018 Details available
The testimonial-slider plugin through 1.2.1 for WordPress has CSRF with resultant XSS.
Published: 2019-09-25T23:44:40.000Z
Updated: 2024-08-06T08:51:04.768Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.