Advisories · Technology
Testimonials Widget.
Every CVE that names Testimonials Widget among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.8 Medium
Testimonials Widget <= 4.0.4 - Unauthenticated SSRF via Featured Image URL
- Testimonials Widget
- Server-side request forgery (SSRF)
- CVSS 7.5 High
Testimonials Widget <= 4.0.4 - Unauthenticated Arbitrary Post Update
- Testimonials Widget
- Broken access control
-
Testimonials Widget < 4.0.0 - Multiple Authenticated Stored XSS
- Testimonials Widget
- Cross-site scripting (XSS)