Stark Digital vulnerabilities

Products

• WP Testimonial Widget 2
• Category Post List Widget 1

Latest Stark Digital CVEs

Newest publication first

1. CVE-2024-43967 WordPress WP Testimonial Widget plugin <= 3.1 - Cross Site Scripting (XSS) vulnerability

   Published 2024-08-26

   Medium·CVSS 4.8 EPSS 0.28%

   Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Stark Digital WP Testimonial Widget allows Stored XSS.This issue affects WP Testimonial Widget: from n/a through 3.1.

2. CVE-2024-43966 WordPress WP Testimonial Widget plugin <= 3.1 - SQL Injection vulnerability

   Published 2024-08-26

   High·CVSS 7.2 EPSS 0.44%

   Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Stark Digital WP Testimonial Widget.This issue affects WP Testimonial Widget: from n/a through 3.1.

3. CVE-2023-47516 WordPress Category Post List Widget Plugin <= 2.0 is vulnerable to Cross Site Scripting (XSS)

   Published 2023-11-13

   Medium·CVSS 6.1 EPSS 0.21%

   Cross-Site Request Forgery (CSRF) vulnerability in Stark Digital Category Post List Widget allows Stored XSS.This issue affects Category Post List Widget: from n/a through 2.0.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.