Unknown Testimonials vulnerabilities

• trustindex.io wp testimonials WP Testimonials <= 1.4.13 - Author+ Stored XSS via wp-testimonials Shortcode CVE-2026-89269 6.8 MediumOctober 13, 2026
• unknown testimonials by bestwebsoft Testimonials by BestWebSoft 1.0.5 - 1.0.8 - Unauthenticated SQLi via 'offset' Parameter CVE-2026-89235 6.8 MediumOctober 9, 2026
• j0hnsmith testimonials widget Testimonials Widget <= 4.0.4 - Unauthenticated SSRF via Featured Image URL CVE-2026-96533 5.8 MediumSeptember 26, 2026
• j0hnsmith testimonials widget Testimonials Widget <= 4.0.4 - Unauthenticated Arbitrary Post Update CVE-2026-96532 7.5 HighSeptember 26, 2026
• kerry kline bne testimonials BNE Testimonials < 2.0.8.2 - Contributor+ Stored XSS via Slider Shortcode CVE-2026-15245 5.4 MediumAugust 7, 2026
• unknown product slider for woocommerce pro, real testimonials pro, smart-post-show-pro +2 more ShapedPlugin Multiple Pro Plugins - Backdoor via Compromised Vendor Update Server CVE-2026-10735 7.5 HighJune 24, 2026
• phptechie wp projects portfolio with client testimonials WP Projects Portfolio with Client Testimonials <= 3.0 - Stored XSS via CSRF CVE-2024-13115 6.1 MediumFebruary 4, 2025
• phptechie wp projects portfolio with client testimonials WP Projects Portfolio with Client Testimonials <= 3.0 - Reflected XSS CVE-2024-13114 6.1 MediumFebruary 4, 2025
• themepoints testimonials WordPress Super Testimonials plugin <= 4.0.1 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2024-43959 7.1 HighSeptember 25, 2024
• ghuger easy testimonials Easy Testimonials <= 3.9.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2024-2337 6.4 MediumJuly 20, 2024
• unknown strong testimonials Strong Testimonials < 3.1.12 - Contributor+ Stored XSS CVE-2024-3261 4.8 MediumApril 24, 2024
• themepoints testimonials WordPress Super Testimonials plugin <= 3.0.5 - Cross Site Scripting (XSS) vulnerability CVE-2024-31348 6.5 MediumApril 7, 2024
• ghuger easy testimonials Easy Testimonials <= 3.6.1 - Cross-Site Request Forgery Bypass CVE-2020-36749 4.3 MediumJuly 1, 2023
• aajoda testimonials, unknown aajoda testimonials +1 more Aajoda Testimonials < 2.2.2 - Admin+ Stored XSS CVE-2023-2178 4.8 MediumJune 27, 2023
• unknown wp responsive testimonials slider and widget, wp responsive testimonials slider and widget project responsive testimonials slider and widget +1 more WP Responsive Testimonials Slider And Widget <= 1.5 - Contributor+ Stored XSS CVE-2022-4750 5.4 MediumFebruary 21, 2023
• machothemes strong testimonials Strong Testimonials < 3.0.3 - Contributor+ Stored XSS via Shortcode CVE-2022-4717 5.4 MediumFebruary 6, 2023
• goldplugins easy testimonials Easy Testimonials < 3.9.3 - Contributor+ Stored XSS CVE-2022-4577 5.4 MediumFebruary 6, 2023
• shapedplugin real testimonials Real Testimonials < 2.6.0 - Contributor+ Stored XSS CVE-2022-4648 5.4 MediumJanuary 16, 2023
• unknown testimonials, themepoints super testimonials, unknown testimonial pro +2 more Testimonials (Free < 2.7, Pro < 1.0.8) - Admin+ Stored Cross-Site Scripting CVE-2022-3539 4.8 MediumNovember 14, 2022
• unknown handsome testimonials & reviews, handsome testimonials \& reviews project testimonials \& reviews +1 more Handsome Testimonials & Reviews < 2.1.1 - Authenticated (Subscriber+) SQL Injection CVE-2021-24492 8.8 HighAugust 2, 2021
• axelerant testimonials widget Testimonials Widget < 4.0.0 - Multiple Authenticated Stored XSS CVE-2021-24136 5.4 MediumMarch 18, 2021
• bestweblayout portfolio, bestwebsoft captcha, car rental +51 more +53 more Cross-site scripting vulnerability in Captcha prior to version 4.3.0, Car Rental prior to version... CVE-2017-2171 6.1 MediumMay 22, 2017