Aajoda Testimonials < 2.2.2 - Cross-Site Scripting

The plugin does not sanitize and escape some of its settings, which could allow high-privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup. id: CVE-2023-2178 info: name: Aajoda Testimonials...

Testimonials by BestWebSoft < 0.1.9 - Cross-Site Scripting

The bws-testimonials plugin before 0.1.9 for WordPress has multiple XSS issues. id: CVE-2017-18558 info: name: Testimonials by BestWebSoft 0.1.9 - Cross-Site Scripting author: luisfelipe146 severity: medium description: | The bws-testimonials plugin before 0.1.9 for WordPress has multiple XSS...

CVE-2026-112843

Missing Authorization vulnerability in WP Chill Strong Testimonials strong-testimonials allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Strong Testimonials: from n/a through 3.3.14...

CVE-2026-112843

The Strong Testimonials WordPress plugin (versions 3.3.14 and below ) is vulnerable to a Missing Authorization vulnerability. This flaw allows for exploiting Incorrectly Configured Access Control Security Levels , potentially impacting the integrity of the system. No specific remediation steps or...

CVE-2026-112843 WordPress Strong Testimonials plugin <= 3.3.14 - Broken Access Control vulnerability

Missing Authorization vulnerability in WP Chill Strong Testimonials strong-testimonials allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Strong Testimonials: from n/a through 3.3.14...

EUVD-2026-108033

Missing Authorization vulnerability in WP Chill Strong Testimonials strong-testimonials allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Strong Testimonials: from n/a through 3.3.14...

WordPress Strong Testimonials plugin <= 3.3.14 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by mroccon in WordPress Plugin Strong Testimonials versions = 3.3.14...

CVE-2026-107435

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Chill Strong Testimonials strong-testimonials allows Stored XSS.This issue affects Strong Testimonials: from n/a through 3.3.12...

CVE-2026-107435 WordPress Strong Testimonials plugin <= 3.3.12 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Chill Strong Testimonials strong-testimonials allows Stored XSS.This issue affects Strong Testimonials: from n/a through 3.3.12...

CVE-2026-107435

The WP Chill Strong Testimonials WordPress plugin is vulnerable to Stored Cross-Site Scripting (XSS) due to the improper neutralization of input during web page generation. This security flaw affects versions from n/a through 3.3.12 . While the vulnerability allows for script execution in the con...

CVE-2026-107435 WordPress Strong Testimonials plugin <= 3.3.12 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Chill Strong Testimonials strong-testimonials allows Stored XSS.This issue affects Strong Testimonials: from n/a through 3.3.12...

EUVD-2026-107136

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Chill Strong Testimonials strong-testimonials allows Stored XSS.This issue affects Strong Testimonials: from n/a through 3.3.12...

PT-2026-120491

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Chill Strong Testimonials strong-testimonials allows Stored XSS.This issue affects Strong Testimonials: from n/a through 3.3.12...

WordPress Strong Testimonials plugin <= 3.3.12 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by jydae in WordPress Plugin Strong Testimonials versions = 3.3.12...

CVE-2026-107436

Deserialization of Untrusted Data vulnerability in WP Chill Strong Testimonials strong-testimonials allows Object Injection.This issue affects Strong Testimonials: from n/a through 3.3.12...

CVE-2026-107436

The WP Chill Strong Testimonials WordPress plugin is vulnerable to PHP Object Injection due to the deserialization of untrusted data . This issue affects versions from n/a through 3.3.12 . An attacker could exploit this to perform Object Injection , potentially impacting the confidentiality, inte...

CVE-2026-107436 WordPress Strong Testimonials plugin <= 3.3.12 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in WP Chill Strong Testimonials strong-testimonials allows Object Injection.This issue affects Strong Testimonials: from n/a through 3.3.12...

EUVD-2026-103433

Deserialization of Untrusted Data vulnerability in WP Chill Strong Testimonials strong-testimonials allows Object Injection.This issue affects Strong Testimonials: from n/a through 3.3.12...

CVE-2026-107436: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in WP Chill Strong Testimonials strong-testimonials allows Object Injection.This issue affects Strong Testimonials: from n/a through 3.3.12...

PT-2026-116586

CVE-2026-107436 CVSS 8.8: Deserialization vulnerability in Strong Testimonials plugin WP Chill through v3.3.12. WordPress sites should check for updates. https://t.co/NKfc4BIlfd… via NVD Recent High CVSS CyberSecurity InfoSec Vulnerability AI MachineLearning https://t.co/q59xLTIjlq...