Extension WordPress
Vulnérabilités Super Testimonial – Testimonial & Customer Review Slider Plugin for WordPress
Cette page rassemble les failles publiées pour Super Testimonial – Testimonial & Customer Review Slider Plugin for WordPress, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Super Testimonial – Testimonial & Customer Review Slider Plugin for WordPress
6 fiches
Super Testimonials <= 4.0.1 – Unauthenticated Stored Cross-Site Scripting
The Super Testimonials plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'st_user_title' parameter in all versions up to, and including, 4.0.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated…
*-4.0.1
4.0.2
17/02/2025
Testimonials <= 3.0.8 – Reflected Cross-Site Scripting
The Testimonials plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 3.0.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts…
*-3.0.8
3.0.9
26/08/2024
Testimonials <= 3.0.5 – Authenticated (Contributor+) Stored Cross-Site Scripting
The Testimonials plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 3.0.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above,…
*-3.0.5
3.0.6
05/04/2024
Super Testimonials <= 2.9 – Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
The Super Testimonials plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'tpsscode' shortcode in all versions up to, and including, 2.9 due to insufficient input sanitization and output escaping on user supplied attributes. This…
*-2.9
3.0
16/10/2023
Testimonials <= 2.6 – Authenticated (Administrator+) Stored Cross-Site Scripting
The Testimonials plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above,…
*-2.6
2.7
27/10/2022
Testimonials (Free <= 2.6, Pro < 1.0.7) – Authenticated (Administrator+) Stored Cross-Site Scripting
The Testimonials plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several parameter in versions up to, and including, 2.6 (Free) and 1.0.7 (Pro) due to insufficient input sanitization and output escaping. This makes it possible for…
*-2.6
2.7
20/10/2022
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.