VYPR

Iq Testimonials

by WordPress

CVEs (1)

  • CVE-2024-6314CriJul 9, 2024
    risk 0.65cvss 9.8epss 0.13

    The IQ Testimonials plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'process_image_upload' function in versions up to, and including, 2.2.7. This makes it possible for unauthenticated attackers to upload arbitrary…