Extension WordPress

Vulnérabilités Stars Testimonials , Responsive Reviews & Star Ratings

Cette page rassemble les failles publiées pour Stars Testimonials , Responsive Reviews & Star Ratings, leurs plages de versions affectées et les correctifs signalés dans la base locale.

3Vulnérabilités
0Critiques
3Avec correctif
8,8CVSS maximal

Historique de sécurité

CVE et vulnérabilités de Stars Testimonials , Responsive Reviews & Star Ratings

3 fiches

CVE-2025-67912 Moyenne · 6,4
Stars Testimonials , Responsive Reviews & Star Ratings

Stars Testimonials <= 3.3.4 – Authenticated (Contributor+) Stored Cross-Site Scripting

The Stars Testimonials plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 3.3.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and…

Versions affectées

*-3.3.4

Correctif

3.3.5

Publication

10/11/2025

CVE-2024-11429 Élevée · 8,8
Stars Testimonials , Responsive Reviews & Star Ratings

Free Responsive Testimonials, Social Proof Reviews, and Customer Reviews – Stars Testimonials <= 3.3.3 – Authenticated (Contributor+) Local File Inclusion

The Free Responsive Testimonials, Social Proof Reviews, and Customer Reviews – Stars Testimonials plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.3.3 via the 'stars-testimonials-with-slider-and-masonry-grid' shortcode. This makes it possible…

Versions affectées

*-3.3.3

Correctif

3.3.4

Publication

04/12/2024

CVE-2024-8989 Moyenne · 6,4
Stars Testimonials , Responsive Reviews & Star Ratings

Stars Testimonials <= 3.3.1 – Authenticated (Contributor+) Stored Cross-Site Scripting via stars_testimonials Shortcode

The Free Responsive Testimonials, Social Proof Reviews, and Customer Reviews – Stars Testimonials plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's stars_testimonials shortcode in all versions up to, and including, 3.3.1 due to insufficient…

Versions affectées

*-3.3.1

Correctif

3.3.2

Publication

30/09/2024

WP Commander

Rechercher dans toute la base WordPress

Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.

Ouvrir le tableau des vulnérabilités