indianic vulnerabilities

Products

• testimonial plugin 2
• Widgets Controller 1

Latest indianic CVEs

Newest publication first

1. CVE-2024-25926 WordPress Widgets Controller plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability

   Published 2024-03-27

   High·CVSS 7.1 EPSS 0.33%

   Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in IndiaNIC Widgets Controller allows Reflected XSS.This issue affects Widgets Controller: from n/a through 1.1.

2. CVE-2013-5672 Testimonial < 2.3 - Cross-Site Request Forgery

   Published 2013-09-10

   Medium·CVSS 6.8 EPSS 3.2% Public exploit

   Multiple cross-site request forgery (CSRF) vulnerabilities in the IndiaNIC Testimonial plugin 2.2 for WordPress allow remote attackers to hijack the authentication of administrators for requests that (1) add a testimonial via an iNIC_testimonial_save action; (2) add a listing tem...

3. CVE-2013-5673 Testimonial < 2.3 - SQL Injection

   Published 2013-09-10

   High·CVSS 7.5 EPSS 6.5% Public exploit

   SQL injection vulnerability in testimonial.php in the IndiaNIC Testimonial plugin 2.2 for WordPress allows remote attackers to execute arbitrary SQL commands via the custom_query parameter in a testimonial_add action to wp-admin/admin-ajax.php.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.