Skip to content
OpenAdvisories

Vendor

starkinfo

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 5.3

    WP Testimonial Widget <= 3.1 - Missing Authorization

    The WP Testimonial Widget plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the fnSaveTestimonailOrder function in all versions up to, and including, 3.1. This makes it possible for unauthenticated at…