7.5
Élevée
CVE-2026-96532 The Testimonials Widget WordPress plugin through 4.0.4 does not perform a capability or ownership check when handling…
Description
The Testimonials Widget WordPress plugin through 4.0.4 does not perform a capability or ownership check when handling its front-end testimonial submission form, allowing unauthenticated users to modify or create arbitrary posts, including overwriting the title, content and author of any existing post.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Testimonials Widget 4.0 | premières → 4.0.4 | Pas de correctif indiqué |