Wp Testimonial Widget
Approved changes feed: RSS · Atom
cpe:2.3:a:starkdigital:wp_testimonial_widget:*:*:*:*:*:wordpress:*:*part: a version: * update: *
| Vendor | Starkdigital (fcc76a35-99e6-51cd-820f-96cd5c6228c4) |
|---|---|
| Product | Wp Testimonial Widget (9fa813a4-e39f-58b4-99fd-7ff5a9176299) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | wordpress |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-7390 |
vulnerable | 2026-06-08 06:58:22.073011 |
WP Testimonial Widget <= 3.1 - Missing Authorization
MEDIUM (5.3)
The WP Testimonial Widget plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the fnSaveTestimonailOrder function in all versions up to, and including, 3.1. This makes it possible for unauthenticated attackers to change the order of testimonials.
Published: 2024-08-21T05:30:20.660Z
Updated: 2026-04-08T16:58:20.844Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-43967 |
vulnerable | 2026-06-08 06:45:53.323052 |
WordPress WP Testimonial Widget plugin <= 3.1 - Cross Site Scripting (XSS) vulnerability
MEDIUM (5.9)
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Stark Digital WP Testimonial Widget allows Stored XSS.This issue affects WP Testimonial Widget: from n/a through 3.1.
Published: 2024-08-26T15:12:26.366Z
Updated: 2026-04-28T16:10:14.610Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-43966 |
vulnerable | 2026-06-08 06:45:53.322506 |
WordPress WP Testimonial Widget plugin <= 3.1 - SQL Injection vulnerability
HIGH (7.6)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Stark Digital WP Testimonial Widget.This issue affects WP Testimonial Widget: from n/a through 3.1.
Published: 2024-08-26T15:07:54.281Z
Updated: 2026-04-28T16:10:14.616Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.