SQL Injection Vulnerability in WP Testimonial Widget

CVE-2024-43966

Summary

A critical SQL Injection vulnerability has been identified in the Stark Digital WP Testimonial Widget, affecting versions from n/a through 3.1. This vulnerability arises from improper neutralization of special elements used in SQL commands, potentially allowing attackers to execute arbitrary SQL code. As a result, unauthorized users may gain access to sensitive information stored in the database. It is essential for users and administrators to apply the necessary patches or updates to mitigate this risk and ensure the security of their sites.

References