Skip to content
OpenAdvisories

Product · ghuger

Easy Testimonials

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.4
    CVE-2024-2337

    Easy Testimonials <= 3.9.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    The Easy Testimonials plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'testimonials_grid ' shortcode in all versions up to, and including, 3.9.5 due to insufficient input sanitization and output escaping on user supplied att…

    ghuger Easy Testimonials Web / CMS
  • Medium 4.3
    CVE-2020-36749

    Easy Testimonials <= 3.6.1 - Cross-Site Request Forgery Bypass

    The Easy Testimonials plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.6.1. This is due to missing or incorrect nonce validation on the saveCustomFields() function. This makes it possible for unauthenticated…

    ghuger Easy Testimonials Web / CMS