WordPress Simple Testimonials Showcase Plugin <= 1.1.6 is vulnerable to Cross Site Scripting (XSS)

Software Simple Testimonials Showcase Type Plugin Vulnerable versions = 1.1.6 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-49295 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 2ec0877579b7 Credits SOPROBRO Required privilege...

WordPress Simple Testimonials Showcase Plugin <= 1.1.6 is vulnerable to Cross Site Request Forgery (CSRF)

Software Simple Testimonials Showcase Type Plugin Vulnerable versions = 1.1.6 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-48283 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 964d38648042 Credits Nguyen...