cleantalk
Vulnerabilities and Security Researches

Vulnerabilities and security researches forindianic-testimonial indianic-testimonial

Direction: ascending
Jun 07, 2024

Testimonial # CVE-2013-5672

CVE, Research URL

CVE-2013-5672

Application

Testimonial

Date
Sep 11, 2013
Research Description
Multiple cross-site request forgery (CSRF) vulnerabilities in the IndiaNIC Testimonial plugin 2.2 for WordPress allow remote attackers to hijack the authentication of administrators for requests that (1) add a testimonial via an iNIC_testimonial_save action; (2) add a listing template via an iNIC_testimonial_save_listing_template action; (3) add a widget template via an iNIC_testimonial_save_widget action; insert cross-site scripting (XSS) sequences via the (4) project_name, (5) project_url, (6) client_name, (7) client_city, (8) client_state, (9) description, (10) tags, (11) video_url, or (12) is_featured, (13) title, (14) widget_title, (15) no_of_testimonials, (16) filter_by_country, (17) filter_by_tags, or (18) widget_template parameter to wp-admin/admin-ajax.php.
Affected versions
Min -, max -.
Status
vulnerable

Testimonial # CVE-2013-5673

CVE, Research URL

CVE-2013-5673

Application

Testimonial

Date
Sep 11, 2013
Research Description
SQL injection vulnerability in testimonial.php in the IndiaNIC Testimonial plugin 2.2 for WordPress allows remote attackers to execute arbitrary SQL commands via the custom_query parameter in a testimonial_add action to wp-admin/admin-ajax.php.
Affected versions
Min -, max -.
Status
vulnerable
Sep 10, 2025

Testimonial # CVE-2025-7826

CVE, Research URL

CVE-2025-7826

Application

Testimonial

Date
-
Research Description
Testimonial [indianic-testimonial] <= 2.3 (unfixed) CVE-2025-7826
Affected versions
Min -, max -.
Status
vulnerable