PT-2017-18907

Name of the Vulnerable Software and Affected Versions WP-Testimonials plugin version 3.4.1 Description The issue allows an authenticated user to execute arbitrary SQL commands. This is achieved via the testid parameter to the "wp-admin/admin.php" endpoint. Recommendations For WP-Testimonials plug...

WordPress WP-Testimonials SQL Injection

Exploit Title: WP-Testimonials 3.4.1 Union Based SQL Injection Date: 03-06-2017 Exploit Author: Dimitrios Tsagkarakis Website: dtsa.eu Software Link: https://en-gb.wordpress.org/plugins/wp-testimonials/ Vendor Homepage: http://www.sunfrogservices.com/web-programmer/wp-testimonials/ Version: 3.4.1...

WordPress Plugin WP-Testimonials < 3.4.1 - SQL Injection

Exploit Title: WP-Testimonials 3.4.1 Union Based SQL Injection Date: 03-06-2017 Exploit Author: Dimitrios Tsagkarakis Website: dtsa.eu Software Link: https://en-gb.wordpress.org/plugins/wp-testimonials/ Vendor Homepage: http://www.sunfrogservices.com/web-programmer/wp-testimonials/ Version: 3.4.1...

WP-Testimonials - Authenticated SQL Injection

Researcher tested version 3.4.1. Plugin removed from WordPress directory...