Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in
ThemepointsSuper Testimonials

4 matches found

CVE
CVE•added 2023/10/20 4:30 a.m.•75 views

CVE-2023-5613

CVE-2023-5613 refers to a Stored Cross-Site Scripting vulnerability in the WordPress plugin Super Testimonials . The issue arises from insufficient input sanitization and output escaping in the shortcode attribute handling of the plugin’s tpsscode shortcode, affecting all versions up to and inclu...

6.4CVSS5.2AI score0.00448EPSS
CVE
CVE•added 2022/10/28 3:9 p.m.•58 views

CVE-2021-36858

CVE-2021-36858 affects WordPress Themepoints/“Testimonials” plugin versions

4.8CVSS4.9AI score0.00412EPSS
CVE
CVE•added 2025/02/18 7:28 a.m.•53 views

CVE-2024-13704

CVE-2024-13704 relates to the WordPress plugin Super Testimonials (also listed in Wordfence). It is a stored cross-site scripting (XSS) vulnerability via the st_user_title parameter in all versions up to 4.0.1, caused by insufficient input sanitization and output escaping. The impact is unauthent...

7.2CVSS6.1AI score0.00322EPSS
CVE
CVE•added 2022/11/14 12:0 a.m.•50 views

CVE-2022-3539

The CVE-2022-3539 issue affects the WordPress plugins Testimonials (before 2.7) and Super Testimonial Pro (before 1.0.8). The root cause is a lack of sanitization and escaping of plugin settings, enabling high-privilege users (e.g., admins) to perform cross-site scripting (XSS) even when the unfi...

4.8CVSS4.8AI score0.00501EPSS