CVE-2015-9417: Cross-Site Request Forgery (CSRF)

The testimonial-slider plugin through 1.2.1 for WordPress has CSRF with resultant XSS...

WordPress Testimonial Slider Plugin SQL Injection Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform using PHP language development, the platform supports in PHP and MySQL servers set up a personal blog site.Testimonial Slider plugin is one of the post to add plugin. A SQL injection vulnerability exists in the '$wpdb-query...

CVE-2018-5372

The Testimonial Slider plugin through 1.2.4 for WordPress has SQL Injection via settings\sliders.php currentsliderid parameter...

CVE-2018-5372

The Testimonial Slider plugin through 1.2.4 for WordPress has SQL Injection via settings\sliders.php currentsliderid parameter...

Sql injection

The Testimonial Slider plugin through 1.2.4 for WordPress has SQL Injection via settings\sliders.php currentsliderid parameter...

CVE-2018-5372

The CVE-2018-5372 entry corresponds to an SQL Injection vulnerability in WordPress plugins’ Testimonial Slider (up to version 1.2.4). Affected component: the Testimonial Slider WordPress plugin, with the vulnerability located in settings/sliders.php via the current_slider_id parameter, due to uns...

CVE-2018-5372

The Testimonial Slider plugin through 1.2.4 for WordPress has SQL Injection via settings\sliders.php currentsliderid parameter...

CVE-2018-5372: Improper Neutralization of Special Elements used in an SQL Command

The Testimonial Slider plugin through 1.2.4 for WordPress has SQL Injection via settings\sliders.php currentsliderid parameter...

PT-2018-16928

Name of the Vulnerable Software and Affected Versions Testimonial Slider plugin versions prior to 1.2.5 Description The issue allows for SQL Injection via the current slider id parameter in the settings/sliders.php file. Recommendations For Testimonial Slider plugin versions prior to 1.2.5, updat...

WordPress Testimonial Slider 1.2.4 SQL Injection

DefenseCode ThunderScan SAST Advisory: WordPress Testimonial Slider Plugin SQL injection Security Vulnerability Advisory ID: DC-2018-01-005 Advisory Title: WordPress Testimonial Slider Plugin SQL injection Security Vulnerability Advisory URL: http://www.defensecode.com/advisories.php Software:...

WordPress Testimonial Slider plugin <=1.2.4 - Authenticated SQL Injection vulnerability

Authenticated SQL Injection vulnerability found by DefenceCode in WordPress Testimonial Slider plugin versions =1.2.4. Solution Update the WordPress Testimonial Slider plugin to the latest version at least 1.2.5...

WordPress Testimonial Slider plugin <=1.2.4 - Authenticated SQL Injection vulnerability

Authenticated SQL Injection vulnerability found by DefenceCode in WordPress Testimonial Slider plugin versions =1.2.4. Solution Update the WordPress Testimonial Slider plugin to the latest version at least 1.2.5...

Testimonial Slider <= 1.2.4 - Authenticated SQL Injection

During the security analysis, ThunderScan discovered SQL injection vulnerability in Testimonial Slider WordPress plugin. The easiest way to reproduce the vulnerability is to visit the provided URL while being logged in as administrator or another user that is authorized to access the plugin...

CVE-2017-12131

The Easy Testimonials plugin 3.0.4 for WordPress has XSS in include/settings/display.options.php, as demonstrated by the Default Testimonials Width, View More Testimonials Link, and Testimonial Excerpt Options screens...

CVE-2017-12131: Improper Neutralization of Input During Web Page Generation

The Easy Testimonials plugin 3.0.4 for WordPress has XSS in include/settings/display.options.php, as demonstrated by the Default Testimonials Width, View More Testimonials Link, and Testimonial Excerpt Options screens...

crittercozy.com XSS vulnerability

Vulnerable URL: http://www.crittercozy.com/CritterCozy-SendTestimonial.php?prodname=%22%27%2D%2D%21 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 9480753 VIP website status:| No...

Cross-site scripting vulnerability in wordpress plugin rotating-testimonial

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. The wordpress plugin rotating-testimonial suffers from a cross-site scripting vulnerability due to improper filtering of user...

gourmandine.info XSS vulnerability

Vulnerable URL: http://www.gourmandine.info/testimonial.php?lang=prompt'OPENBUGBOUNTY'...

WordPress Gallery Master 1.0.22 Cross Site Scripting

Exploit : For Exploiting This Vulnerability Install Testimonial Slider Plugin Then Create New SGallery In Gallery Title Input And Gallery Description Place Your JavaScript Code After Creating Gallery JavaScript Code Will Be Executed . Plugin Is Accessable By Authors , Administartors , Editors...

WordPress Testimonial Slider Plugin <= 1.2.1 - Multiple Vulnerabilities

This plugin is prone to an authenticated stored cross site scripting and cross site request forgery vulnerabilities. Solution Update the plugin...