starkdigital records

4 published records for vendor starkdigital.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

4 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
28Monitor	CVE-2024-43966No exploit	WordPress WP Testimonial Widget plugin <= 3.1 - SQL Injection vulnerabilitystarkdigital · wp testimonial widget · CWE-89 SQL injection	High7.2	—	0.4%	Aug 26, 2024
24Monitor	CVE-2023-47516No exploit	WordPress Category Post List Widget Plugin <= 2.0 is vulnerable to Cross Site Scripting (XSS)starkdigital · category post list widget · CWE-352 Pre-auth XSS CSRF	Medium6.1	—	0.2%	Nov 13, 2023
21Monitor	CVE-2024-7390No exploit	WP Testimonial Widget <= 3.1 - Missing Authorizationstarkdigital · wp testimonial widget · CWE-862 Pre-auth Broken access control (IDOR)	Medium5.3	—	0.3%	Aug 21, 2024
19Monitor	CVE-2024-43967No exploit	WordPress WP Testimonial Widget plugin <= 3.1 - Cross Site Scripting (XSS) vulnerabilitystarkdigital · wp testimonial widget · CWE-79 XSS	Medium4.8	—	0.3%	Aug 26, 2024

CVE-2024-43966
28Monitor
WordPress WP Testimonial Widget plugin <= 3.1 - SQL Injection vulnerability
HighCVSS 7.2No exploitEPSS 0%
- SQL injection
starkdigital · wp testimonial widgetAug 26, 2024
CVE-2023-47516
24Monitor
WordPress Category Post List Widget Plugin <= 2.0 is vulnerable to Cross Site Scripting (XSS)
MediumCVSS 6.1No exploitEPSS 0%
starkdigital · category post list widgetNov 13, 2023
CVE-2024-7390
21Monitor
WP Testimonial Widget <= 3.1 - Missing Authorization
MediumCVSS 5.3No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
starkdigital · wp testimonial widgetAug 21, 2024
CVE-2024-43967
19Monitor
WordPress WP Testimonial Widget plugin <= 3.1 - Cross Site Scripting (XSS) vulnerability
MediumCVSS 4.8No exploitEPSS 0%
- XSS
starkdigital · wp testimonial widgetAug 26, 2024