WordPress WP-Testimonials plugin is prone to SQL injection vulnerability. The vulnerability allows an authenticated user to execute arbitrary SQL commands via the “testid” parameter to wp-admin/admin.php
WordPress WP-Testimonials plugin removed from WordPress plugin directory. We suggest you deactivate and remove plugin for safety reasons.
Update (06.26.2017) - plugin still not available on WordPress plugin directory, plugin vendor website unreachable.