Skip to content
OpenAdvisories

Vendor

SolaPlugins

3 known vulnerabilities.

Products

Sola Support Ticket 1 Nifty Newsletters 1 Super Testimonials 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2023-25997

    WordPress Sola Support Ticket <= 3.17 - Arbitrary Content Deletion Vulnerability

    Missing Authorization vulnerability in SolaPlugins Sola Support Ticket allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Sola Support Ticket: from n/a through 3.17.

    SolaPlugins Sola Support Ticket
  • Medium 6.4
    CVE-2024-9127

    Super Testimonials <= 3.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via alignment Parameter

    The Super Testimonials plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘alignment’ parameter in all versions up to, and including, 3.0.0 due to insufficient input sanitization and output escaping. This makes it possible for authentic…

    SolaPlugins Super Testimonials Web / CMS