CVE-2026-120509

The Real Testimonials – Testimonial Slider, Collect Customer Reviews and Video Testimonials plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'tproclientname' parameter in all versions up to, and including, 4.1.0 due to insufficient input sanitization and output escaping...

CVE-2026-120509 Real Testimonials <= 4.1.0 - Unauthenticated Stored Cross-Site Scripting via 'tpro_client_name' Parameter

The Real Testimonials – Testimonial Slider, Collect Customer Reviews and Video Testimonials plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'tproclientname' parameter in all versions up to, and including, 4.1.0 due to insufficient input sanitization and output escaping...

CVE-2026-120509

The Real Testimonials – Testimonial Slider, Collect Customer Reviews and Video Testimonials plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in versions up to and including 4.1.0 . The root cause is insufficient input sanitization and output escaping of the 'tpro_client_nam...

EUVD-2026-119165

The Real Testimonials – Testimonial Slider, Collect Customer Reviews and Video Testimonials plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'tproclientname' parameter in all versions up to, and including, 4.1.0 due to insufficient input sanitization and output escaping...