Lucene search
+L

938 matches found

NVD
NVD
•added 2026/10/22 7:16 a.m.•3 views

CVE-2026-112843

Missing Authorization vulnerability in WP Chill Strong Testimonials strong-testimonials allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Strong Testimonials: from n/a through 3.3.14...

4.3CVSS0.00152EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/22 6:53 a.m.•6 views

CVE-2026-112843 WordPress Strong Testimonials plugin <= 3.3.14 - Broken Access Control vulnerability

Missing Authorization vulnerability in WP Chill Strong Testimonials strong-testimonials allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Strong Testimonials: from n/a through 3.3.14...

4.3CVSS0.00152EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/22 6:53 a.m.•5 views

CVE-2026-112843

The Strong Testimonials WordPress plugin (versions 3.3.14 and below ) is vulnerable to a Missing Authorization vulnerability. This flaw allows for exploiting Incorrectly Configured Access Control Security Levels , potentially impacting the integrity of the system. No specific remediation steps or...

4.3CVSS6AI score0.00152EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/22 6:53 a.m.•3 views

EUVD-2026-108033

Missing Authorization vulnerability in WP Chill Strong Testimonials strong-testimonials allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Strong Testimonials: from n/a through 3.3.14...

4.3CVSS6AI score0.00152EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2026/10/22 6:52 a.m.•3 views

WordPress Strong Testimonials plugin <= 3.3.14 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by mroccon in WordPress Plugin Strong Testimonials versions = 3.3.14...

4.3CVSS5.8AI score0.00152EPSS
SaveExploits0Affected Software1
Nuclei
Nuclei
•added 2026/10/22 2:06 a.m.•51 views

Aajoda Testimonials < 2.2.2 - Cross-Site Scripting

The plugin does not sanitize and escape some of its settings, which could allow high-privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup. id: CVE-2023-2178 info: name: Aajoda Testimonials...

4.8CVSS6.2AI score0.00773EPSS
SaveExploits2References3
NVD
NVD
•added 2026/10/21 8:16 a.m.•9 views

CVE-2026-107435

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Chill Strong Testimonials strong-testimonials allows Stored XSS.This issue affects Strong Testimonials: from n/a through 3.3.12...

7.1CVSS0.00146EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/21 8:00 a.m.•10 views

CVE-2026-107435

The WP Chill Strong Testimonials WordPress plugin is vulnerable to Stored Cross-Site Scripting (XSS) due to the improper neutralization of input during web page generation. This security flaw affects versions from n/a through 3.3.12 . While the vulnerability allows for script execution in the con...

7.1CVSS5.8AI score0.00146EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/21 8:00 a.m.•23 views

CVE-2026-107435 WordPress Strong Testimonials plugin <= 3.3.12 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Chill Strong Testimonials strong-testimonials allows Stored XSS.This issue affects Strong Testimonials: from n/a through 3.3.12...

7.1CVSS0.00146EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/10/21 8:00 a.m.•5 views

CVE-2026-107435 WordPress Strong Testimonials plugin <= 3.3.12 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Chill Strong Testimonials strong-testimonials allows Stored XSS.This issue affects Strong Testimonials: from n/a through 3.3.12...

7.1CVSS5.8AI score0.00146EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/21 8:00 a.m.•9 views

EUVD-2026-107136

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Chill Strong Testimonials strong-testimonials allows Stored XSS.This issue affects Strong Testimonials: from n/a through 3.3.12...

7.1CVSS5.8AI score0.00146EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/10/21 12:00 a.m.•12 views

PT-2026-120491

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Chill Strong Testimonials strong-testimonials allows Stored XSS.This issue affects Strong Testimonials: from n/a through 3.3.12...

7.1CVSS5.8AI score0.00146EPSS
SaveExploits0References2
Nuclei
Nuclei
•added 2026/10/20 2:05 a.m.•56 views

Testimonials by BestWebSoft < 0.1.9 - Cross-Site Scripting

The bws-testimonials plugin before 0.1.9 for WordPress has multiple XSS issues. id: CVE-2017-18558 info: name: Testimonials by BestWebSoft 0.1.9 - Cross-Site Scripting author: luisfelipe146 severity: medium description: | The bws-testimonials plugin before 0.1.9 for WordPress has multiple XSS...

6.1CVSS6.2AI score0.01384EPSS
SaveExploits1References4
Patchstack
Patchstack
•added 2026/10/19 7:27 a.m.•6 views

WordPress Strong Testimonials plugin <= 3.3.12 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by jydae in WordPress Plugin Strong Testimonials versions = 3.3.12...

7.1CVSS5.8AI score0.00146EPSS
SaveExploits0Affected Software1
NVD
NVD
•added 2026/10/18 11:16 a.m.•10 views

CVE-2026-107436

Deserialization of Untrusted Data vulnerability in WP Chill Strong Testimonials strong-testimonials allows Object Injection.This issue affects Strong Testimonials: from n/a through 3.3.12...

8.8CVSS0.00355EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/18 11:00 a.m.•16 views

CVE-2026-107436

The WP Chill Strong Testimonials WordPress plugin is vulnerable to PHP Object Injection due to the deserialization of untrusted data . This issue affects versions from n/a through 3.3.12 . An attacker could exploit this to perform Object Injection , potentially impacting the confidentiality, inte...

8.8CVSS5.8AI score0.00355EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/18 11:00 a.m.•10 views

EUVD-2026-103433

Deserialization of Untrusted Data vulnerability in WP Chill Strong Testimonials strong-testimonials allows Object Injection.This issue affects Strong Testimonials: from n/a through 3.3.12...

8.8CVSS5.8AI score0.00355EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/18 11:00 a.m.•27 views

CVE-2026-107436 WordPress Strong Testimonials plugin <= 3.3.12 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in WP Chill Strong Testimonials strong-testimonials allows Object Injection.This issue affects Strong Testimonials: from n/a through 3.3.12...

8.8CVSS0.00355EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/10/18 12:00 a.m.•13 views

PT-2026-116586

CVE-2026-107436 CVSS 8.8: Deserialization vulnerability in Strong Testimonials plugin WP Chill through v3.3.12. WordPress sites should check for updates. https://t.co/NKfc4BIlfd… via NVD Recent High CVSS CyberSecurity InfoSec Vulnerability AI MachineLearning https://t.co/q59xLTIjlq...

8.8CVSS5.8AI score0.00355EPSS
SaveExploits0References4
Patchstack
Patchstack
•added 2026/10/16 10:41 a.m.•9 views

WordPress Strong Testimonials plugin <= 3.3.12 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Ayukiab in WordPress Plugin Strong Testimonials versions = 3.3.12...

8.8CVSS5.8AI score0.00355EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder