plugin
4 known security issues reported for the Wp Elegant Testimonial WordPress plugin. Most recent disclosed Aug 19, 2020.
Running Wp Elegant Testimonial on your site? Check whether your installed version is affected.
Scan your site freeMultiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities found by Melbin K Mathew in WordPress Elegant Testimonial plugin (versions <= 1.1.6).
The WP Elegant Testimonial plugin for WordPress is vulnerable to Cross-Site Scripting via several parameters in versions up to, and including, 1.1.6 due to insufficient input sanitization and output escaping. This makes it possible for attackers to inject arbitrary web scripts that execute in a victim's browser.
The WP Elegant Testimonial plugin for WordPress is vulnerable to Cross-Site Scripting via several parameters in versions up to, and including, 1.1.6 due to insufficient input sanitization and output escaping. This makes it possible for attackers to inject arbitrary web scripts that execute in a victim's browser.
The name, company and text fields used while adding a testimonial to a page was found to be vulnerable to stored XSS, as they did not sanitize user given input properly before publishing the post. It is triggered when a user loads a page where the plugin shortcode is used. All WordPress websites using WP Elegant Testim...
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free