Skip to content
OpenAdvisories

Vendor

amu02aftab

7 known vulnerabilities.

Products

Category and Taxonomy Meta Fields 3 Client Testimonial Slider 2 Enable Shortcodes inside Widgets,Comments and Experts 1 Category and Taxonomy Image 1
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 4.4
    CVE-2026-2716

    Client Testimonial Slider <= 2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Testimonial Heading' Setting

    The Client Testimonial Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Testimonial Heading' setting in all versions up to, and including, 2.0. This is due to insufficient input sanitization and output escaping. This makes it …

    amu02aftab Client Testimonial Slider Web / CMS
  • Medium 6.4
    CVE-2025-13897

    Client Testimonial Slider <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'aft_testimonial_meta_name' Metabox Field

    The Client Testimonial Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'aft_testimonial_meta_name' custom field in the Client Information metabox in all versions up to, and including, 2.0 due to insufficient input sanitization…

    amu02aftab Client Testimonial Slider Web / CMS
  • Medium 5.5
    CVE-2024-9591

    Category and Taxonomy Image <= 1.0.0 - Authenticated (Editor+) Stored Cross-Site Scripting

    The Category and Taxonomy Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '_category_image' parameter in versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping on user supplied attribute…

    amu02aftab Category and Taxonomy Image Web / CMS
  • Medium 5.5
    CVE-2024-9589

    Category and Taxonomy Meta Fields <= 1.0.0 - Authenticated (Administrator+) Stored Cross-Site Scripting

    The Category and Taxonomy Meta Fields plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'new_meta_name' parameter in the 'wpaft_option_page' function in versions up to, and including, 1.0.0 due to insufficient input sanitization and ou…

    amu02aftab Category and Taxonomy Meta Fields Web / CMS
  • Medium 5.5
    CVE-2024-9590

    Category and Taxonomy Meta Fields <= 1.0.0 - Authenticated (Editor+) Stored Cross-Site Scripting

    The Category and Taxonomy Meta Fields plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the image meta field value in the 'wpaft_add_meta_textinput' function in versions up to, and including, 1.0.0 due to insufficient input sanitization an…

    amu02aftab Category and Taxonomy Meta Fields Web / CMS
  • Medium 5.4
    CVE-2024-9588

    Category and Taxonomy Meta Fields <= 1.0.0 - Cross-Site Request Forgery to Taxonomy Meta Add/Delete

    The Category and Taxonomy Meta Fields plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0.0. This is due to missing or incorrect nonce validation on the 'wpaft_option_page' function. This makes it possible fo…

    amu02aftab Category and Taxonomy Meta Fields Web / CMS