ST
Product
Strong Testimonials
12
CVEs
0
On KEV
8.8
Max CVSS
1
New 30D
Severity mix
Critical 0High 3Medium 9Low 0
Watch
Add Strong Testimonials to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-92622 | 6.4 | Sep 18 | Strong Testimonials <= 3.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'lightbox_class' Shortcode Attribute Affected: through 3.3.8 |
| CVE-2026-3239 | 6.4 | Apr 8 | Strong Testimonials <= 3.2.21 - Authenticated (Contributor+) Stored Cross-Site Scripting via testimonial_view Shortcode Affected: through 3.2.21 |
| CVE-2025-7367 | 6.4 | Jul 15 | Strong Testimonials <= 3.2.11 - Authenticated (Author+) Stored Cross-Site Scripting via Custom Fields Affected: through 3.2.11 |
| CVE-2020-8549 | 6.1 | Feb 3 | Stored XSS in the Strong Testimonials plugin before 2.40.1 for WordPress can result in an attacker performing malicious actions such as stealing session tokens Affected: before 2.40.1 |
| CVE-2023-26013 | 5.4 | Jun 16 | WordPress Strong Testimonials Plugin <= 3.0.2 is vulnerable to Cross Site Scripting (XSS) Affected: through 3.0.2 |
| CVE-2024-3261 | 4.8 | Apr 24 | Strong Testimonials < 3.1.12 - Contributor+ Stored XSS Affected: before 3.1.12 |
| CVE-2025-14426 | 4.3 | Dec 30 | Strong Testimonials <= 3.2.18 - Missing Authorization to Authenticated (Contributor+) Rating Meta Update Affected: through 3.2.18 |
| CVE-2025-11268 | 4.3 | Nov 6 | Strong Testimonials <= 3.2.16 - Unauthenticated Arbitrary Shortcode Execution Affected: through 3.2.16 |
| CVE-2023-6491 | 4.3 | Jun 7 | Strong Testimonials <= 3.1.12 - Authenticated(Contributor+) Improper Authorization to Views Modification Affected: through 3.1.12 |
Showing 9