Wpchill

Strong Testimonials

8 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.4

CVE-2025-7367

  • EPSS 0.04%
  • Published 15.07.2025 04:23:41
  • Last modified 15.07.2025 13:14:24

The Strong Testimonials plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Testimonial Custom Fields in all versions up to, and including, 3.2.11 due to insufficient input sanitization and output escaping. This makes it possibl...

5.3

CVE-2025-26975

  • EPSS 0.07%
  • Published 25.02.2025 15:15:30
  • Last modified 25.02.2025 15:15:30

Missing Authorization vulnerability in WP Chill Strong Testimonials allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Strong Testimonials: from n/a through 3.2.3.

8.8

CVE-2024-47362

  • EPSS 0.32%
  • Published 01.11.2024 15:15:55
  • Last modified 05.11.2024 21:44:55

Missing Authorization vulnerability in WPChill Strong Testimonials allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Strong Testimonials: from n/a through 3.1.16.

4.3

CVE-2023-6491

  • EPSS 0.19%
  • Published 07.06.2024 06:15:09
  • Last modified 21.11.2024 08:43:57

The Strong Testimonials plugin for WordPress is vulnerable to unauthorized modification of data due to an improper capability check on the wpmtst_save_view_sticky function in all versions up to, and including, 3.1.12. This makes it possible for authe...

4.8

CVE-2024-3261

Exploit
  • EPSS 0.2%
  • Published 24.04.2024 05:15:47
  • Last modified 08.05.2025 19:12:36

The Strong Testimonials WordPress plugin before 3.1.12 does not validate and escape some of its Testimonial fields before outputting them back in a page/post, which could allow users with the contributor role and above to perform Stored Cross-Site Sc...

8.8

CVE-2023-52123

  • EPSS 0.07%
  • Published 05.01.2024 09:15:08
  • Last modified 21.11.2024 08:39:13

Cross-Site Request Forgery (CSRF) vulnerability in WPChill Strong Testimonials.This issue affects Strong Testimonials: from n/a through 3.1.10.

5.4

CVE-2023-26013

  • EPSS 0.08%
  • Published 16.06.2023 09:15:09
  • Last modified 21.11.2024 07:50:35

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in WPChill Strong Testimonials plugin <= 3.0.2 versions.

6.1

CVE-2020-8549

Exploit
  • EPSS 0.56%
  • Published 03.02.2020 17:15:17
  • Last modified 21.11.2024 05:39:00

Stored XSS in the Strong Testimonials plugin before 2.40.1 for WordPress can result in an attacker performing malicious actions such as stealing session tokens.