PatchTheCVEwp testimonial widget vulnerabilities and fixes
Recent CVEs affecting wp testimonial widget, with upgrade or downgrade steps. 3 tracked.
Also searched as: wptestimonialwidget.
wp testimonial widget has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2024-08-26. Highest priority: CVE-2024-43966 (score 36/100).
- CVE-2024-7390 MEDIUM 5.3 UPGRADE The WP Testimonial Widget plugin for WordPress is vulnerable to unauthorized modification of data due to a mis
- CVE-2024-43967 MEDIUM 5.9 UPGRADE Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in S
- CVE-2024-43966 HIGH 7.6 UPGRADE Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Stark Di
FAQ
How do I fix wp testimonial widget vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is wp testimonial widget being exploited right now?
None of the tracked wp testimonial widget CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which wp testimonial widget CVE should I patch first?
CVE-2024-43966 currently ranks highest (36/100): Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Stark Di.