CVE-2024-4858

CVE-2024-4858 affects the WordPress plugin Testimonial Carousel for Elementor (WordPress plugin). The vulnerability is due to a missing capability check in the function save_testimonials_option_callback, present in versions up to and including 10.2.0, enabling unauthenticated attackers to modify ...

CVE-2024-35713

The CVE-2024-35713 entry corresponds to a Stored Cross-Site Scripting (XSS) vulnerability in the WordPress plugin Testimonial Carousel For Elementor, affecting versions up to and including 10.1.1. The root cause is improper input neutralization during web page generation, enabling injection of sc...