Wpshopmart Testimonial Builder — known CVE vulnerabilities

Every CVE whose affected-product data names Wpshopmart Testimonial Builder, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2021-24598 — CVSS 4.8 (medium): The Testimonial WordPress plugin before 1.6.0 does not escape some testimonial fields which could allow high privilege users to perform…
• CVE-2021-36857 — CVSS 4.8 (medium): Authenticated (editor+) Stored Cross-Site Scripting (XSS) vulnerability in wpshopmart Testimonial Builder plugin <= 1.6.1 at WordPress.