CVE-2024-43966

CVE-2024-43966 : Vulnerability in WP Testimonial Widget (WordPress plugin) with an SQL injection caused by improper neutralization. Affected: WP Testimonial Widget from n/a to 3.1. Exposure requires authenticated access (Admin+) and currently shows as unpatched; no exploits details provided in th...

CVE-2024-43967

CVE-2024-43967 concerns the WP Testimonial Widget. The vulnerability is a stored XSS caused by improper neutralization of input during web page generation, affecting WP Testimonial Widget versions from n/a up to and including 3.1. The exploit requires an authenticated Administrator+ permission. N...

CVE-2024-7390

CVE-2024-7390 — WP Testimonial Widget (WordPress) affects the WP Testimonial Widget plugin for WordPress up to version 3.0. The root cause is a missing capability check on the function fnSaveTestimonailOrder, enabling unauthenticated modification of data (changing testimonial order). Public detai...