Veille CVE

Recherche « Unknown Testimonials Widget »

2 CVE

Critique 0 Élevée 1 Moyenne 1 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Unknown Testimonials Widget » ✕
  1. CVE-2026-96533 5.8 Moyenne

    Unknown Testimonials Widget

    The Testimonials Widget WordPress plugin through 4.0.4 does not validate a user-supplied URL before fetching it server-side and storing the response as a public file, allowing unauthenticated users to make the server issue requests to internal services and read the responses.

  2. CVE-2026-96532 7.5 Élevée

    Unknown Testimonials Widget

    The Testimonials Widget WordPress plugin through 4.0.4 does not perform a capability or ownership check when handling its front-end testimonial submission form, allowing unauthenticated users to modify or create arbitrary posts, including overwriting the title, content and author of any existing post.