Wpchill

Strong Testimonials

8 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.4

CVE-2025-7367

  • EPSS 0.04%
  • Veröffentlicht 15.07.2025 04:23:41
  • Zuletzt bearbeitet 15.07.2025 13:14:24

The Strong Testimonials plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Testimonial Custom Fields in all versions up to, and including, 3.2.11 due to insufficient input sanitization and output escaping. This makes it possibl...

5.3

CVE-2025-26975

  • EPSS 0.07%
  • Veröffentlicht 25.02.2025 15:15:30
  • Zuletzt bearbeitet 25.02.2025 15:15:30

Missing Authorization vulnerability in WP Chill Strong Testimonials allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Strong Testimonials: from n/a through 3.2.3.

8.8

CVE-2024-47362

  • EPSS 0.32%
  • Veröffentlicht 01.11.2024 15:15:55
  • Zuletzt bearbeitet 05.11.2024 21:44:55

Missing Authorization vulnerability in WPChill Strong Testimonials allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Strong Testimonials: from n/a through 3.1.16.

4.3

CVE-2023-6491

  • EPSS 0.19%
  • Veröffentlicht 07.06.2024 06:15:09
  • Zuletzt bearbeitet 21.11.2024 08:43:57

The Strong Testimonials plugin for WordPress is vulnerable to unauthorized modification of data due to an improper capability check on the wpmtst_save_view_sticky function in all versions up to, and including, 3.1.12. This makes it possible for authe...

4.8

CVE-2024-3261

Exploit
  • EPSS 0.2%
  • Veröffentlicht 24.04.2024 05:15:47
  • Zuletzt bearbeitet 08.05.2025 19:12:36

The Strong Testimonials WordPress plugin before 3.1.12 does not validate and escape some of its Testimonial fields before outputting them back in a page/post, which could allow users with the contributor role and above to perform Stored Cross-Site Sc...

8.8

CVE-2023-52123

  • EPSS 0.07%
  • Veröffentlicht 05.01.2024 09:15:08
  • Zuletzt bearbeitet 21.11.2024 08:39:13

Cross-Site Request Forgery (CSRF) vulnerability in WPChill Strong Testimonials.This issue affects Strong Testimonials: from n/a through 3.1.10.

5.4

CVE-2023-26013

  • EPSS 0.08%
  • Veröffentlicht 16.06.2023 09:15:09
  • Zuletzt bearbeitet 21.11.2024 07:50:35

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in WPChill Strong Testimonials plugin <= 3.0.2 versions.

6.1

CVE-2020-8549

Exploit
  • EPSS 0.56%
  • Veröffentlicht 03.02.2020 17:15:17
  • Zuletzt bearbeitet 21.11.2024 05:39:00

Stored XSS in the Strong Testimonials plugin before 2.40.1 for WordPress can result in an attacker performing malicious actions such as stealing session tokens.