Accesspressthemes Ap Custom Testimonial — known CVE vulnerabilities

Every CVE whose affected-product data names Accesspressthemes Ap Custom Testimonial, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2021-24867 — CVSS 9.8 (critical): Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised…
• CVE-2022-23911 — CVSS 7.2 (high): The Testimonial WordPress Plugin WordPress plugin before 1.4.7 does not validate and escape the id parameter before using it in a SQL…
• CVE-2022-23912 — CVSS 6.1 (medium): The Testimonial WordPress Plugin WordPress plugin before 1.4.7 does not sanitise and escape the id parameter before outputting it back in…