WordPress Elegant Testimonial 1.1.6 Persistent Cross Site Scripting

Exploit Title: WordPress Elegant Testimonial Plugin v1.1.6 - Persistent Cross-Site Scripting Date: 2020-08-18 Vendor Homepage: https://noorsplugin.com/ Vendor Changelog: https://wordpress.org/plugins/wp-elegant-testimonial/developers Exploit Author: Melbin K Mathew @melbinkm Author Advisory:...

Testimonial Rotator < 3.0.3 - Authenticated Stored Cross-Site Scripting (XSS)

A Stored XSS vulnerability has been found in the 'Author Information' textarea in testimonials from the plugin, which could allow an authenticated medium-privileged user contributor+ to inject arbitrary JavaScript. The XSS will be triggered for anyone visiting public posts or testimonial page...

WordPress Testimonial Rotator plugin <= 3.0.2 - Cross-Site Scripting (XSS) vulnerability

Cross-Site Scripting XSS vulnerability found by Vu Dong in WordPress Testimonial Rotator plugin versions = 3.0.2. Solution Update the WordPress Testimonial Rotator plugin to the latest available version at least 3.0.3...

Testimonial Rotator < 3.0.3 - Authenticated Stored Cross-Site Scripting (XSS)

A Stored XSS vulnerability has been found in the 'Author Information' textarea in testimonials from the plugin, which could allow an authenticated medium-privileged user contributor+ to inject arbitrary JavaScript. The XSS will be triggered for anyone visiting public posts or testimonial page...

Testimonial < 2.2 - Authenticated Stored Cross-Site Scripting (XSS)

A stored XSS vulnerability exists in the version of the plugin 2.1.6. Successful exploitation of this vulnerability would allow an authenticated low-privileged user to inject arbitrary javascript code into the plugin gallery image which is viewed by other users...

WordPress Testimonial – Best Testimonial Slider plugin <= 2.1.7 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Fortinet in WordPress Testimonial – Best Testimonial Slider plugin versions = 2.1.7. Solution Update the WordPress Testimonial – Best Testimonial Slider plugin to the latest available version at least 2.2...

WordPress Strong Testimonials 2.40.1 Cross Site Scripting

Exploit Title: Wordpress Plugin Strong Testimonials 2.40.0 - Persistent Cross-Site Scripting Date: 2020-01-23 Vendor Homepage: https://strongtestimonials.com Vendor Changelog: https://github.com/MachoThemes/strong-testimonials/blob/master/changelog.txt Exploit Author: Jinson Varghese Behanan Auth...

CVE-2013-4241

Multiple cross-site scripting XSS vulnerabilities in the HMS Testimonials plugin before 2.0.11 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 name, 2 image, 3 url, or 4 testimonial parameter to the Testimonial form hms-testimonials-addnew page; 5 dateformat...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the HMS Testimonials plugin before 2.0.11 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 name, 2 image, 3 url, or 4 testimonial parameter to the Testimonial form hms-testimonials-addnew page; 5 dateformat...

WordPress testimonial-slider plugin has unspecified vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. testimonial-slider is a sliding recommendation window plugin used in it. A security vulnerability exists in WordPress testimonial-slid...

CVE-2015-9417

The testimonial-slider plugin through 1.2.1 for WordPress has CSRF with resultant XSS...

CVE-2015-9417

The testimonial-slider plugin through 1.2.1 for WordPress has CSRF with resultant XSS...

CVE-2015-9417

The CVE-2015-9417 entry concerns the WordPress plugin testimonial-slider (versions up to 1.2.1). A CSRF vulnerability enables a cross-site scripting (XSS) condition in this plugin. Some connected sources indicate exploitation requires privileged access (administrator level) and that the XSS can b...

WordPress Testimonial Slider Plugin SQL Injection Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform using PHP language development, the platform supports in PHP and MySQL servers set up a personal blog site.Testimonial Slider plugin is one of the post to add plugin. A SQL injection vulnerability exists in the '$wpdb-query...

CVE-2018-5372

The Testimonial Slider plugin through 1.2.4 for WordPress has SQL Injection via settings\sliders.php currentsliderid parameter...

CVE-2018-5372

The Testimonial Slider plugin through 1.2.4 for WordPress has SQL Injection via settings\sliders.php currentsliderid parameter...

Sql injection

The Testimonial Slider plugin through 1.2.4 for WordPress has SQL Injection via settings\sliders.php currentsliderid parameter...

CVE-2018-5372

The CVE-2018-5372 entry corresponds to an SQL Injection vulnerability in WordPress plugins’ Testimonial Slider (up to version 1.2.4). Affected component: the Testimonial Slider WordPress plugin, with the vulnerability located in settings/sliders.php via the current_slider_id parameter, due to uns...

WordPress Testimonial Slider 1.2.4 SQL Injection

DefenseCode ThunderScan SAST Advisory: WordPress Testimonial Slider Plugin SQL injection Security Vulnerability Advisory ID: DC-2018-01-005 Advisory Title: WordPress Testimonial Slider Plugin SQL injection Security Vulnerability Advisory URL: http://www.defensecode.com/advisories.php Software:...

WordPress Testimonial Slider plugin <=1.2.4 - Authenticated SQL Injection vulnerability

Authenticated SQL Injection vulnerability found by DefenceCode in WordPress Testimonial Slider plugin versions =1.2.4. Solution Update the WordPress Testimonial Slider plugin to the latest version at least 1.2.5...