Skip to content
OpenAdvisories

Vendor

Themepoints

20 known vulnerabilities.

Products

Logo Showcase 3 Accordion 3 Tab Ultimate 2 Carousel Ultimate 2 Testimonials 2 Super Testimonial – Testimonial & Customer Review Slider Plugin for WordPress 2 Testimonials (WordPress plugin) 1 Team Showcase 1 Accordions – Responsive Accordion & FAQ Plugin for WordPress 1 Team Showcase – Responsive Team Members Grid, Slider & Carousel Plugin 1 Service Box 1 Skill Bar 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.2
    CVE-2024-13704

    Super Testimonials <= 4.0.1 - Unauthenticated Stored Cross-Site Scripting

    The Super Testimonials plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'st_user_title' parameter in all versions up to, and including, 4.0.1 due to insufficient input sanitization and output escaping. This makes it possible for unaut…

    Themepoints Super Testimonial – Testimonial & Customer Review Slider Plugin for WordPress Web / CMS
  • High 7.1
    CVE-2024-43959

    WordPress Super Testimonials plugin <= 4.0.1 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themepoints Testimonials super-testimonial allows Reflected XSS.This issue affects Testimonials: from n/a through <= 4.0.1.

    Themepoints Testimonials