Description

WordPress Plugin Testimonial WordPress-AP Custom Testimonial is prone to an unspecified vulnerability. No available information exists regarding this issue and it's impact on a vulnerable website. WordPress Plugin Testimonial WordPress-AP Custom Testimonial version 1.4.7 is vulnerable; prior versions may also be affected.

Remediation

Update to plugin version 1.4.8 or latest

References

https://plugins.svn.wordpress.org/ap-custom-testimonial/trunk/readme.txt

Related Vulnerabilities

PostgreSQL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-15099)

osCommerce Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2002-2019)

Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2011-4584)

jQuery UI Tooltip Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-5312)

WordPress Plugin Delete Comments By Status Multiple Cross-Site Scripting Vulnerabilities (1.5.2)

Severity

High

Tags

Missing Update