Login Request a demo
ST
Product
Strong Testimonials
by wpchill · last CVE Oct 3, 2026
12
CVEs
0
On KEV
8.8
Max CVSS
1
New 30D
Vulnerabilities12In the news0Timeline
Severity mix
Critical 0High 3Medium 9Low 0
Severity
All severities12Critical0High3Medium9Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Strong Testimonials to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-47362
8.8
0%
Nov 1
WordPress Strong Testimonials plugin <= 3.1.16 - Broken Access Control vulnerability
Affected: before 3.1.17
CVE-2023-52123
8.8
0%
Jan 5
WordPress Strong Testimonials Plugin <= 3.1.10 is vulnerable to Cross Site Request Forgery (CSRF)
Affected: through 3.1.10
CVE-2026-96650
7.2
0%
Oct 3
Strong Testimonials <= 3.3.11 - Unauthenticated Stored Cross-Site Scripting via 'platform_user_photo' Custom Field
Affected: through 3.3.11
CVE-2026-92622
6.4
0%
Sep 18
Strong Testimonials <= 3.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'lightbox_class' Shortcode Attribute
Affected: through 3.3.8
CVE-2026-3239
6.4
0%
Apr 8
Strong Testimonials <= 3.2.21 - Authenticated (Contributor+) Stored Cross-Site Scripting via testimonial_view Shortcode
Affected: through 3.2.21
CVE-2025-7367
6.4
0%
Jul 15
Strong Testimonials <= 3.2.11 - Authenticated (Author+) Stored Cross-Site Scripting via Custom Fields
Affected: through 3.2.11
CVE-2020-8549
6.1
2%
Feb 3
Stored XSS in the Strong Testimonials plugin before 2.40.1 for WordPress can result in an attacker performing malicious actions such as stealing session tokens
Affected: before 2.40.1
CVE-2023-26013
5.4
0%
Jun 16
WordPress Strong Testimonials Plugin <= 3.0.2 is vulnerable to Cross Site Scripting (XSS)
Affected: through 3.0.2
CVE-2024-3261
4.8
0%
Apr 24
Strong Testimonials < 3.1.12 - Contributor+ Stored XSS
Affected: before 3.1.12
CVE-2025-14426
4.3
0%
Dec 30
Strong Testimonials <= 3.2.18 - Missing Authorization to Authenticated (Contributor+) Rating Meta Update
Affected: through 3.2.18
CVE-2025-11268
4.3
0%
Nov 6
Strong Testimonials <= 3.2.16 - Unauthenticated Arbitrary Shortcode Execution
Affected: through 3.2.16
CVE-2023-6491
4.3
0%
Jun 7
Strong Testimonials <= 3.1.12 - Authenticated(Contributor+) Improper Authorization to Views Modification
Affected: through 3.1.12
Showing 12