CVE-2024-13704
Published Feb 18, 2025The Super Testimonials plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'st_user_title' parameter in all versions up to, and including, 4.0.1 due to insuf…
Vendor archive
themepoints CVEs
Beta · best-effort8 CVEs tagged to vendor themepoints — 0 Critical, 1 High, 7 Medium, 0 Low, 0 Unrated.
CVE-2023-47809
Published Nov 22, 2023Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themepoints Accordion plugin <= 2.6 versions.
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2023-5667
Published Nov 22, 2023The Tab Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in all versions up to, and including, 1.3 due to insufficient input…
- evidence mentions
- 2
- Buzz score
- 16.0
CVE-2023-5666
Published Oct 30, 2023The Accordion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'tcpaccordion' shortcode in all versions up to, and including, 2.6 due to insuffic…
- evidence mentions
- 2
- Buzz score
- 16.0
CVE-2023-5613
Published Oct 20, 2023The Super Testimonials plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'tpsscode' shortcode in all versions up to, and including, 2.9 due to ins…
- evidence mentions
- 2
- Buzz score
- 16.0
CVE-2023-5639
Published Oct 19, 2023The Team Showcase plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'tmfshortcode' shortcode in all versions up to, and including, 2.1 due to insu…
- evidence mentions
- 2
- Buzz score
- 16.0
CVE-2022-3539
Published Nov 14, 2022The Testimonials WordPress plugin before 2.7, super-testimonial-pro WordPress plugin before 1.0.8 do not sanitize and escape its settings, allowing high privilege users such as ad…
CVE-2021-36858
Published Oct 28, 2022Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Themepoints Testimonials plugin <= 2.6 on WordPress.
Showing 1-8 of 8 CVEsPage 1 of 1