Social proof testimonials and reviews by Repuso < 5.00 - Missing Authorization

Description The Social proof testimonials and reviews by Repuso plugin for WordPress is vulnerable to unauthorized access of data due to missing capability checks on several functions hooked via AJAX actions in versions up to, and including, 4.97. This makes it possible for authenticated attacker...

The vulnerability of the Aajoda Testimonials plugin of the WordPress content management system allows attackers to perform cross-site scripting attacks.

The vulnerability of the Aajoda Testimonials plugin for WordPress content management systems is related to the lack of security measures taken to protect the website’s structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks...

CVE-2023-5613

The Super Testimonials plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'tpsscode' shortcode in all versions up to, and including, 2.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

CVE-2023-5613

The Super Testimonials plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'tpsscode' shortcode in all versions up to, and including, 2.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

Cross site scripting

The Super Testimonials plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'tpsscode' shortcode in all versions up to, and including, 2.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

PT-2023-32214

Name of the Vulnerable Software and Affected Versions The Super Testimonials plugin for WordPress versions up to, and including, 2.9 Description The issue is related to Stored Cross-Site Scripting via the plugin's 'tpsscode' shortcode due to insufficient input sanitization and output escaping on...

CVE-2023-45048

Cross-Site Request Forgery CSRF vulnerability in Repuso Social proof testimonials and reviews by Repuso plugin = 5.00 versions...

CVE-2023-45048

CVE-2023-45048 is a CSRF vulnerability in the Repuso Social proof testimonials and reviews by Repuso plugin, affected in versions

Social Proof Testimonials and Reviews by Repuso < 5.02 - CSRF

Description The plugin does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks...

WordPress plugin Social proof testimonials and reviews by Repuso Cross-site request forgery vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin Social proof...

CVE-2023-2830

Cross-Site Request Forgery CSRF vulnerability in Trustindex.Io WP Testimonials plugin = 1.4.2 versions...

CVE-2023-2830

Cross-Site Request Forgery CSRF vulnerability in Trustindex.Io WP Testimonials plugin = 1.4.2 versions...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Trustindex.Io WP Testimonials plugin = 1.4.2 versions...

CVE-2023-2830 WordPress WP Testimonials Plugin <= 1.4.2 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Trustindex.Io WP Testimonials plugin = 1.4.2 versions...

CVE-2023-2830

CVE-2023-2830 describes a Cross-Site Request Forgery (CSRF) vulnerability in the Trustindex.Io WP Testimonials WordPress plugin, affecting versions ≤ 1.4.2. The vulnerability is addressed by upgrading to version 1.4.3 or later. Several sources (Patchstack, Red Hat, NVD/CVE references) consistentl...

WordPress Plugin WP Testimonials Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress Plugin WP...

WordPress Strong Testimonials Plugin < 2.40.1 XSS Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:machothemes:strongtestimonials"; ifdescription...

WordPress WP Testimonials Plugin <= 1.4.2 is vulnerable to Cross Site Request Forgery (CSRF)

Software WP Testimonials Type Plugin Vulnerable versions = 1.4.2 Fixed in 1.4.3 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-2830 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID beae4f3056d8 Credits Skalucy Required...

CVE-2020-36749

The Easy Testimonials plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.6.1. This is due to missing or incorrect nonce validation on the saveCustomFields function. This makes it possible for unauthenticated attackers to save custom fields via a...

Cross site request forgery (csrf)

The Easy Testimonials plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.6.1. This is due to missing or incorrect nonce validation on the saveCustomFields function. This makes it possible for unauthenticated attackers to save custom fields via a...