WordPress WP-Testimonials plugin <=3.4.1 - SQL Injection vulnerability

WordPress WP-Testimonials plugin is prone to SQL injection vulnerability. The vulnerability allows an authenticated user to execute arbitrary SQL commands via the “testid” parameter to wp-admin/admin.php

Solution

           WordPress WP-Testimonials plugin removed from WordPress plugin directory. We suggest you deactivate and remove plugin for safety reasons.

Update (06.26.2017) - plugin still not available on WordPress plugin directory, plugin vendor website unreachable.