CVE-2026-120683

The Real Testimonials – Testimonial Slider, Collect Customer Reviews and Video Testimonials plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'tproclienttestimonial' parameter in all versions up to, and including, 4.1.0 due to insufficient input sanitization and output...

CVE-2026-120685

The Real Testimonials – Testimonial Slider, Collect Customer Reviews and Video Testimonials plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'tproclientimage JPEG IPTC caption + tproclienttestimonial gallery shortcode' parameter in all versions up to, and including, 4.1.0...

CVE-2026-120685 Real Testimonials <= 4.1.0 - Unauthenticated Stored Cross-Site Scripting via JPEG IPTC Caption + '[gallery]' Shortcode Chain

The Real Testimonials – Testimonial Slider, Collect Customer Reviews and Video Testimonials plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'tproclientimage JPEG IPTC caption + tproclienttestimonial gallery shortcode' parameter in all versions up to, and including, 4.1.0...

CVE-2026-120685

The Real Testimonials WordPress plugin (versions up to and including 4.1.0 ) is vulnerable to Unauthenticated Stored Cross-Site Scripting (XSS) . The flaw is caused by insufficient input sanitization and output escaping in the tpro_client_image (JPEG IPTC caption) and tpro_client_testimonial ([ga...

CVE-2026-120683 Real Testimonials <= 4.1.0 - Unauthenticated Stored Cross-Site Scripting via Testimonial Submission Form 'tpro_client_testimonial' Parameter

The Real Testimonials – Testimonial Slider, Collect Customer Reviews and Video Testimonials plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'tproclienttestimonial' parameter in all versions up to, and including, 4.1.0 due to insufficient input sanitization and output...

CVE-2026-120683

The Real Testimonials – Testimonial Slider, Collect Customer Reviews and Video Testimonials plugin for WordPress (versions up to and including 4.1.0 ) is vulnerable to Stored Cross-Site Scripting (XSS) . The flaw exists in the 'tpro_client_testimonial' parameter due to insufficient input sanitiza...

EUVD-2026-119147

The Real Testimonials – Testimonial Slider, Collect Customer Reviews and Video Testimonials plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'tproclienttestimonial' parameter in all versions up to, and including, 4.1.0 due to insufficient input sanitization and output...