Unknown Testimonial vulnerabilities

• trustindex.io wp testimonials WP Testimonials <= 1.4.13 - Author+ Stored XSS via wp-testimonials Shortcode CVE-2026-89269 6.8 MediumOctober 13, 2026
• unknown testimonials by bestwebsoft Testimonials by BestWebSoft 1.0.5 - 1.0.8 - Unauthenticated SQLi via 'offset' Parameter CVE-2026-89235 6.8 MediumOctober 9, 2026
• j0hnsmith testimonials widget Testimonials Widget <= 4.0.4 - Unauthenticated SSRF via Featured Image URL CVE-2026-96533 5.8 MediumSeptember 26, 2026
• j0hnsmith testimonials widget Testimonials Widget <= 4.0.4 - Unauthenticated Arbitrary Post Update CVE-2026-96532 7.5 HighSeptember 26, 2026
• kerry kline bne testimonials BNE Testimonials < 2.0.8.2 - Contributor+ Stored XSS via Slider Shortcode CVE-2026-15245 5.4 MediumAugust 7, 2026
• unknown product slider for woocommerce pro, real testimonials pro, smart-post-show-pro +2 more ShapedPlugin Multiple Pro Plugins - Backdoor via Compromised Vendor Update Server CVE-2026-10735 7.5 HighJune 24, 2026
• unknown creta testimonial showcase Creta Testimonial Showcase < 1.2.4 - Editor+ Local File Inclusion CVE-2025-10686 7.2 HighNovember 14, 2025
• phptechie wp projects portfolio with client testimonials WP Projects Portfolio with Client Testimonials <= 3.0 - Stored XSS via CSRF CVE-2024-13115 6.1 MediumFebruary 4, 2025
• phptechie wp projects portfolio with client testimonials WP Projects Portfolio with Client Testimonials <= 3.0 - Reflected XSS CVE-2024-13114 6.1 MediumFebruary 4, 2025
• sazzad testimonial slider shortcode WordPress Testimonial Slider Shortcode plugin <= 1.1.9 - Cross Site Scripting (XSS) vulnerability CVE-2024-51925 6.5 MediumNovember 19, 2024
• themepoints testimonials WordPress Super Testimonials plugin <= 4.0.1 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2024-43959 7.1 HighSeptember 25, 2024
• ghuger easy testimonials Easy Testimonials <= 3.9.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2024-2337 6.4 MediumJuly 20, 2024
• unknown strong testimonials Strong Testimonials < 3.1.12 - Contributor+ Stored XSS CVE-2024-3261 4.8 MediumApril 24, 2024
• pickplugins testimonial slider, radiustheme testimonial slider and showcase +1 more Testimonial Slider < 2.3.8 - Admin+ Stored XSS CVE-2024-1746 5.4 MediumApril 15, 2024
• themepoints testimonials WordPress Super Testimonials plugin <= 3.0.5 - Cross Site Scripting (XSS) vulnerability CVE-2024-31348 6.5 MediumApril 7, 2024
• pickplugins testimonial slider, radiustheme testimonial slider and showcase +1 more Testimonial Slider < 2.3.7 - Author+ Settings Update CVE-2024-1745 4.3 MediumMarch 26, 2024
• sazzadh testimonial slider shortcode Testimonial Slider Shortcode < 1.1.9 - Contributor+ Stored XSS CVE-2023-4795 5.4 MediumOctober 16, 2023
• ghuger easy testimonials Easy Testimonials <= 3.6.1 - Cross-Site Request Forgery Bypass CVE-2020-36749 4.3 MediumJuly 1, 2023
• aajoda testimonials, unknown aajoda testimonials +1 more Aajoda Testimonials < 2.2.2 - Admin+ Stored XSS CVE-2023-2178 4.8 MediumJune 27, 2023
• unknown wp responsive testimonials slider and widget, wp responsive testimonials slider and widget project responsive testimonials slider and widget +1 more WP Responsive Testimonials Slider And Widget <= 1.5 - Contributor+ Stored XSS CVE-2022-4750 5.4 MediumFebruary 21, 2023
• machothemes strong testimonials Strong Testimonials < 3.0.3 - Contributor+ Stored XSS via Shortcode CVE-2022-4717 5.4 MediumFebruary 6, 2023
• goldplugins easy testimonials Easy Testimonials < 3.9.3 - Contributor+ Stored XSS CVE-2022-4577 5.4 MediumFebruary 6, 2023
• shapedplugin real testimonials Real Testimonials < 2.6.0 - Contributor+ Stored XSS CVE-2022-4648 5.4 MediumJanuary 16, 2023
• unknown testimonials, themepoints super testimonials, unknown testimonial pro +2 more Testimonials (Free < 2.7, Pro < 1.0.8) - Admin+ Stored Cross-Site Scripting CVE-2022-3539 4.8 MediumNovember 14, 2022
• accesspressthemes ap custom testimonial, unknown testimonial wordpress plugin – ap custom testimonial +1 more AP Custom Testimonial < 1.4.8 - Reflected Cross-Site Scripting CVE-2022-23912 6.1 MediumFebruary 28, 2022
• accesspressthemes ap custom testimonial, unknown testimonial wordpress plugin – ap custom testimonial +1 more AP Custom Testimonial < 1.4.8 - Admin+ SQL Injection CVE-2022-23911 7.2 HighFebruary 28, 2022
• access-keys wp popup banners, accesspress themes accessbuddy, basic +141 more +143 more Backdoored Plugins & Themes from AccessPress Themes CVE-2021-24867 EPSS 18.0% 9.8 CriticalFebruary 21, 2022
• laki patel testimonial, wpshopmart testimonial builder +1 more Testimonial Builder < 1.6.0 - Admin+ Stored Cross-Site Scripting CVE-2021-24598 4.8 MediumNovember 17, 2021
• easy testimonial manager project testimonial manager, unknown easy testimonial manager +1 more Easy Testimonial Manager <= 1.2.0 - Authenticated SQL Injection CVE-2021-24394 7.2 HighSeptember 6, 2021
• unknown handsome testimonials & reviews, handsome testimonials \& reviews project testimonials \& reviews +1 more Handsome Testimonials & Reviews < 2.1.1 - Authenticated (Subscriber+) SQL Injection CVE-2021-24492 8.8 HighAugust 2, 2021
• testimonial rotator project rotator, unknown testimonial rotator +1 more Testimonial Rotator <= 3.0.3 - Authenticated Stored Cross-Site Scripting CVE-2021-24156 5.4 MediumApril 5, 2021
• axelerant testimonials widget Testimonials Widget < 4.0.0 - Multiple Authenticated Stored XSS CVE-2021-24136 5.4 MediumMarch 18, 2021
• bestweblayout portfolio, bestwebsoft captcha, car rental +51 more +53 more Cross-site scripting vulnerability in Captcha prior to version 4.3.0, Car Rental prior to version... CVE-2017-2171 6.1 MediumMay 22, 2017