5.8
Moyenne
CVE-2026-96533 The Testimonials Widget WordPress plugin through 4.0.4 does not validate a user-supplied URL before fetching it…
Description
The Testimonials Widget WordPress plugin through 4.0.4 does not validate a user-supplied URL before fetching it server-side and storing the response as a public file, allowing unauthenticated users to make the server issue requests to internal services and read the responses.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Testimonials Widget 4.0 | premières → 4.0.4 | Pas de correctif indiqué |