Axelerant Testimonials Widget — known CVE vulnerabilities

Every CVE whose affected-product data names Axelerant Testimonials Widget, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2024-37553 — CVSS 6.5 (medium): Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Axelerant Testimonials Widget…
• CVE-2024-4705 — CVSS 6.4 (medium): The Testimonials Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's testimonials shortcode in all…
• CVE-2021-24136 — CVSS 5.4 (medium): Unvalidated input and lack of output encoding in the Testimonials Widget WordPress plugin, versions before 4.0.0, lead to multiple…