premio Vulnerabilities and Affected Products
Vulnerabilities associated with testimonials.
Products
Clear product- Folders – Unlimited Folders to Organize Media Library Folder, Pages, Posts, File Manager6 vulnerabilities
- Chaty4 vulnerabilities
- Coupon X – Discount Popups & Promo Codes Pop Ups for WooCommerce2 vulnerabilities
- Folders Pro2 vulnerabilities
- My Sticky Bar – Floating Notification Bar & Sticky Header (formerly myStickymenu)2 vulnerabilities
- My Sticky Elements2 vulnerabilities
- my_sticky_bar2 vulnerabilities
- Stars Testimonials — Responsive Reviews & Star Ratings2 vulnerabilities
- All-in-one Sticky Floating Contact Form, Call, Click to Chat, and 50+ Social Icon Tabs – My Sticky Elements1 vulnerability
- all_in_one_floating_contact_form_my_sticky_elements1 vulnerability
- Chaty (WordPress plugin)1 vulnerability
- Floating Chat Widget: Contact Chat Icons, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call Button – Chaty1 vulnerability
- floating_chat_widget1 vulnerability
- folders1 vulnerability
- folders_pro1 vulnerability
- My Sticky Bar1 vulnerability
- Stars Testimonials1 vulnerability
- testimonials1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2024-11429HIGH | Free Responsive Testimonials, Social Proof Reviews, and Customer Reviews – Stars Testimonials <= 3.3.3 - Authenticated (Contributor+) Local File InclusionThe Free Responsive Testimonials, Social Proof Reviews, and Customer Reviews – Stars Testimonials plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.3.3 via the 'stars-testimonials-with-slider-and-masonry-grid' shortcode. This makes it possible for authenticated attackers, with contributor-level access and above, to include and execute arbitrary PHP files on the server, allowing the execution of any PHP code in those files. This can be used to bypa… CWE-98Dec 5, 2024 | CVSS8.8v3.1 | EPSS0.7% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |