Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-06-17
Wp Testimonial Widget - Cross-Site Scripting (XSS) (CVE-2024-43967)
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Stark Digital WP Testimonial Widget allows Stored XSS.This issue affects WP Testimonial Widget: from n/a through 3.1.
PLUGIN
Wp Testimonial Widget
CVE-2024-43967
Risk Score
Threat Entry
Updated 2026-06-17
Wp Testimonial Widget - SQL Injection (CVE-2024-43966)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Stark Digital WP Testimonial Widget.This issue affects WP Testimonial Widget: from n/a through 3.1.
PLUGIN
Wp Testimonial Widget
CVE-2024-43966
Risk Score
Threat Entry
Updated 2026-06-17
Wp Testimonial Widget - Broken Access Control (CVE-2024-7390)
The WP Testimonial Widget plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the fnSaveTestimonailOrder function in all versions up to, and including, 3.1. This makes it possible for unauthenticated attackers to change the order of testimonials.
PLUGIN
Wp Testimonial Widget
CVE-2024-7390
Risk Score