Vendor
starkinfo
1 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
Medium 5.3
WP Testimonial Widget <= 3.1 - Missing Authorization
The WP Testimonial Widget plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the fnSaveTestimonailOrder function in all versions up to, and including, 3.1. This makes it possible for unauthenticated at…