Known vulnerabilities in Easy Testimonials
Vendor:
Gold Plugins
Software:
Easy Testimonials
Software CPE:
cpe:2.3:a:richardgabriel:easy-testimonials:*:*:*:*:*:wordpress:*:*
Total vulnerabilities:
5
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
5.3
Breakdown by Severity Chart
Vulnerabilities (5)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU46789 - Cross-Site Request Forgery (CSRF) |
CWE-352 | Low | 3.7 | 17.09.2020 |
SB2020091719 |
||
| #VU27908 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
CWE-79 | Low | 3.6 | 14.05.2020 |
SB2020051404 |
||
| #VU27907 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
CWE-79 | Low | 3.6 | 14.05.2020 |
SB2020051404 |
||
| #VU27906 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
CWE-79 | Low | 3.6 | 14.05.2020 |
SB2020051404 |
||
| #VU27905 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
CWE-79 | Low | 3.6 | 14.05.2020 |
SB2020051404 |