WordPress Plugin Vulnerabilities

Testimonials by BestWebSoft 1.0.5 - 1.0.8 - Unauthenticated SQLi via 'offset' Parameter

Description

The plugin does not sanitise and escape a parameter before using it in a SQL query, allowing unauthenticated attackers to append additional SQL to the query.

Proof of Concept

Affects Plugins

Plugin icon
bws-testimonials
No known fix

References

CVE
CVE-2026-89235

Classification

Type
SQLI
OWASP top 10
A1: Injection
CWE
CWE-89
CVSS
6.8 (medium)

Miscellaneous

Original Researcher
Enrico Marcolini - Claudio Marchesini - Dottor Marc
Submitter
Enrico Marcolini - Claudio Marchesini - Dottor Marc
Submitter website
https://www.dottormarc.it
Verified
Yes
WPVDB ID
00801815-efc8-41f7-9984-0e81698c7f68

Timeline

Publicly Published
2026-10-06 (about 3 days ago)
Added
2026-09-29 (about 10 days ago)
Last Updated
2026-09-29 (about 10 days ago)

Other

Published
Title
Published
2014-08-01
Title
Search Everything 7.0.2 - search-everything.php s Parameter SQL Injection
Published
2026-10-05
Title
ListingPro Plugin <= 2.9.12 - Authenticated (Subscriber+) SQL Injection
Published
2025-04-15
Title
Office Locator <= 1.3.0 - Unauthenticated SQL Injection
Published
2014-09-19
Title
YAWPP < 1.2.2 - SQL Injection
Published
2026-10-05
Title
uDesign | Multipurpose WordPress Theme <= 4.15.0 - Authenticated (Subscriber+) SQL Injection