CVE-2024-38345

Severity: high (CVSS 8.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-07-04 · updated 2026-06-17
Weakness: CWE-352

Description

A cross-site request forgery vulnerability exists in Sola Testimonials versions prior to 3.0.0. If this vulnerability is exploited, an attacker allows a user who logs in to the WordPress site where the affected plugin is enabled to access a malicious page. As a result, the user may perform unintended operations on the WordPress site.

Affected products

SolaPlugins Sola Testimonials: before 3.0.0 — fixed in 3.0.0

How to fix

Upgrade to a fixed version: SolaPlugins Sola Testimonials 3.0.0. Check the vendor advisory for mitigations.

References

https://jvn.jp/en/jp/JVN34977158/
https://wordpress.org/plugins/sola-testimonials/
https://jvn.jp/en/jp/JVN34977158/
https://wordpress.org/plugins/sola-testimonials/

Get alerted when CVE-2024-38345 or the next vulnerability affects your stack