Starkdigital Wp Testimonial Widget — known CVE vulnerabilities

Every CVE whose affected-product data names Starkdigital Wp Testimonial Widget, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2024-43966 — CVSS 7.6 (high): Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Stark Digital WP Testimonial…
• CVE-2024-43967 — CVSS 5.9 (medium): Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Stark Digital WP Testimonial…
• CVE-2024-7390 — CVSS 5.3 (medium): The WP Testimonial Widget plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the…