Skip to content

Wpchill Strong Testimonials vulnerabilities

wp chill strong testimonialsWordPress Strong Testimonials plugin <= 3.3.17 - Content Injection vulnerabilityCVE-2026-1210285.3 MediumNovember 11, 2026
wpchill strong testimonialsStrong Testimonials <= 3.3.16 - Unauthenticated Stored Cross-Site Scripting via 'star_rating' ParameterCVE-2026-1158117.2 HighNovember 7, 2026
wp chill strong testimonialsWordPress Strong Testimonials plugin <= 3.3.15 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-1147066.5 MediumOctober 29, 2026
wp chill strong testimonialsWordPress Strong Testimonials plugin <= 3.3.14 - Broken Access Control vulnerabilityCVE-2026-1128434.3 MediumOctober 22, 2026
wp chill strong testimonialsWordPress Strong Testimonials plugin <= 3.3.12 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-1074357.1 HighOctober 21, 2026
wp chill strong testimonialsWordPress Strong Testimonials plugin <= 3.3.12 - PHP Object Injection vulnerabilityCVE-2026-1074368.8 HighOctober 18, 2026
wp chill strong testimonialsWordPress Strong Testimonials plugin <= 3.3.12 - Broken Access Control vulnerabilityCVE-2026-1098975.4 MediumOctober 15, 2026
wp chill strong testimonialsWordPress Strong Testimonials plugin <= 3.3.12 - Broken Access Control vulnerabilityCVE-2026-1103714.3 MediumOctober 15, 2026
wpchill strong testimonialsStrong Testimonials <= 3.3.11 - Unauthenticated Stored Cross-Site Scripting via 'platform_user_photo' Custom FieldCVE-2026-966507.2 HighOctober 3, 2026
wp chill strong testimonialsWordPress Strong Testimonials plugin <= 3.3.11 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-97286Public exploit6.5 MediumSeptember 30, 2026
wpchill strong testimonialsStrong Testimonials <= 3.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'lightbox_class' Shortcode AttributeCVE-2026-926226.4 MediumSeptember 18, 2026
wpchill strong testimonialsStrong Testimonials <= 3.2.21 - Authenticated (Contributor+) Stored Cross-Site Scripting via testimonial_view ShortcodeCVE-2026-32396.4 MediumApril 8, 2026
wp chill strong testimonialsWordPress Strong Testimonials plugin <= 3.2.20 - Broken Access Control vulnerabilityCVE-2026-249576.5 MediumFebruary 3, 2026
wpchill strong testimonialsStrong Testimonials <= 3.2.18 - Missing Authorization to Authenticated (Contributor+) Rating Meta UpdateCVE-2025-144264.3 MediumDecember 30, 2025
wpchill strong testimonialsStrong Testimonials <= 3.2.16 - Unauthenticated Arbitrary Shortcode ExecutionCVE-2025-112684.3 MediumNovember 6, 2025
wpchill strong testimonialsStrong Testimonials <= 3.2.11 - Authenticated (Author+) Stored Cross-Site Scripting via Custom FieldsCVE-2025-73676.4 MediumJuly 15, 2025
wp chill strong testimonialsWordPress Strong Testimonials plugin <= 3.2.3 - Broken Access Control vulnerabilityCVE-2025-269755.3 MediumFebruary 25, 2025
wp chill strong testimonialsWordPress Strong Testimonials plugin <= 3.1.16 - Broken Access Control vulnerabilityCVE-2024-473624.3 MediumNovember 1, 2024
wpchill strong testimonialsStrong Testimonials <= 3.1.12 - Authenticated(Contributor+) Improper Authorization to Views ModificationCVE-2023-64914.3 MediumJune 7, 2024
unknown strong testimonialsStrong Testimonials < 3.1.12 - Contributor+ Stored XSSCVE-2024-32614.8 MediumApril 24, 2024
wpchill strong testimonialsWordPress Strong Testimonials Plugin <= 3.1.10 is vulnerable to Cross Site Request Forgery (CSRF)CVE-2023-521234.3 MediumJanuary 5, 2024
wpchill strong testimonialsWordPress Strong Testimonials Plugin <= 3.0.2 is vulnerable to Cross Site Scripting (XSS)CVE-2023-260136.5 MediumJune 16, 2023
machothemes strong testimonialsStrong Testimonials < 3.0.3 - Contributor+ Stored XSS via ShortcodeCVE-2022-47175.4 MediumFebruary 6, 2023