WPChill Strong Testimonials vulnerabilities

CVEs per yearBy the year they were published

1. 20231
2. 20242
3. 20253
4. 20263

Newest CVEs

• CVE-2026-96650

  Strong Testimonials <= 3.3.11 - Unauthenticated Stored Cross-Site Scripting via 'platform_user_photo' Custom Field

  wpchill · Strong Testimonials

  High7.2
• CVE-2026-92622

  Strong Testimonials <= 3.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'lightbox_class' Shortcode Attribute

  wpchill · Strong Testimonials

  Medium6.4
• CVE-2026-3239

  Strong Testimonials <= 3.2.21 - Authenticated (Contributor+) Stored Cross-Site Scripting via testimonial_view Shortcode

  wpchill · Strong Testimonials

  Medium6.4
• CVE-2025-14426

  Strong Testimonials <= 3.2.18 - Missing Authorization to Authenticated (Contributor+) Rating Meta Update

  wpchill · Strong Testimonials

  Medium4.3
• CVE-2025-11268

  Strong Testimonials <= 3.2.16 - Unauthenticated Arbitrary Shortcode Execution

  wpchill · Strong Testimonials

  Medium4.3
• CVE-2025-7367

  Strong Testimonials <= 3.2.11 - Authenticated (Author+) Stored Cross-Site Scripting via Custom Fields

  wpchill · Strong Testimonials

  Medium6.4
• CVE-2023-6491

  Strong Testimonials <= 3.1.12 - Authenticated(Contributor+) Improper Authorization to Views Modification

  wpchill · Strong Testimonials

  Medium4.3
• CVE-2023-52123

  WordPress Strong Testimonials Plugin <= 3.1.10 is vulnerable to Cross Site Request Forgery (CSRF)

  WPChill · Strong Testimonials

  Medium4.3
• CVE-2023-26013

  WordPress Strong Testimonials Plugin <= 3.0.2 is vulnerable to Cross Site Scripting (XSS)

  WPChill · Strong Testimonials

  Medium6.5