Testimonials By Bestwebsoft
Monthly
SQL injection in Testimonials by BestWebSoft WordPress plugin through 1.0.8 lets unauthenticated remote attackers append SQL to a database query and read data from the underlying WordPress database. Publicly available exploit code exists (reported by WPScan), with no CISA KEV confirmation of active exploitation. The independent assessment rates this as a moderate-priority, network-reachable, low-complexity issue with no authentication or user interaction and confidentiality-only impact; the supplied CVSS vector's AC:H and S:C are not supported by the description and should be treated cautiously.
SQL injection in Testimonials by BestWebSoft WordPress plugin through 1.0.8 lets unauthenticated remote attackers append SQL to a database query and read data from the underlying WordPress database. Publicly available exploit code exists (reported by WPScan), with no CISA KEV confirmation of active exploitation. The independent assessment rates this as a moderate-priority, network-reachable, low-complexity issue with no authentication or user interaction and confidentiality-only impact; the supplied CVSS vector's AC:H and S:C are not supported by the description and should be treated cautiously.