GCVE - cpe:2.3:a:pickplugins:testimonial_slider:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:pickplugins:testimonial_slider:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Pickplugins (`03c448d6-40a7-5ce8-8d7e-bbbe6a0aa644`)
Product	Testimonial Slider (`542cb19a-84d9-5b87-9d1b-0c900d5fdc85`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-68000`	vulnerable	2026-06-03 15:11:02.664782	WordPress Testimonial Slider plugin <= 2.0.15 - Broken Access Control vulnerability MEDIUM (6.5) Missing Authorization vulnerability in PickPlugins Testimonial Slider testimonial allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Testimonial Slider: from n/a through <= 2.0.15. Published: 2026-02-20T15:46:33.875Z Updated: 2026-04-28T16:14:25.337Z Open on db.gcve.eu Reference links https://patchstack.com/database/Wordpress/Plugin/testimonial/vulnerability/wordpress-testimonial-slider-plugin-2-0-15-broken-access-control-vulnerability-2?_s_id=cve	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-62929`	vulnerable	2026-06-03 15:09:35.789197	WordPress Testimonial Slider plugin <= 2.0.15 - Broken Access Control vulnerability MEDIUM (6.5) Missing Authorization vulnerability in PickPlugins Testimonial Slider testimonial allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Testimonial Slider: from n/a through <= 2.0.15. Published: 2025-10-27T01:34:00.648Z Updated: 2026-04-28T16:14:06.020Z Open on db.gcve.eu Reference links https://patchstack.com/database/Wordpress/Plugin/testimonial/vulnerability/wordpress-testimonial-slider-plugin-2-0-15-broken-access-control-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-30889`	vulnerable	2026-06-03 15:00:29.787406	WordPress Testimonial Slider plugin <= 2.0.13 - PHP Object Injection vulnerability HIGH (8.8) Deserialization of Untrusted Data vulnerability in PickPlugins Testimonial Slider testimonial allows Object Injection.This issue affects Testimonial Slider: from n/a through <= 2.0.13. Published: 2025-04-03T13:27:08.634Z Updated: 2026-04-28T16:11:59.827Z Open on db.gcve.eu Reference links https://patchstack.com/database/Wordpress/Plugin/testimonial/vulnerability/wordpress-testimonial-slider-plugin-2-0-13-php-object-injection-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.