What’s Vulnerable › Products

WP Chill Strong Testimonials vulnerabilities

20 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 16 published in the last 12 months.

Check whether your WP Chill Strong Testimonials version is affected

Latest WP Chill Strong Testimonials vulnerabilities

• CVE-2026-114706 — WordPress Strong Testimonials plugin <= 3.3.15 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
• CVE-2026-112843 — WordPress Strong Testimonials plugin <= 3.3.14 - Broken Access Control vulnerability (CVSS 4.3)
• CVE-2026-107435 — WordPress Strong Testimonials plugin <= 3.3.12 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
• CVE-2026-107436 — WordPress Strong Testimonials plugin <= 3.3.12 - PHP Object Injection vulnerability (CVSS 8.8)
• CVE-2026-109897 — WordPress Strong Testimonials plugin <= 3.3.12 - Broken Access Control vulnerability (CVSS 5.4)
• CVE-2026-110371 — WordPress Strong Testimonials plugin <= 3.3.12 - Broken Access Control vulnerability (CVSS 4.3)
• CVE-2026-96650 — Strong Testimonials <= 3.3.11 - Unauthenticated Stored Cross-Site Scripting via 'platform_user_photo' Custom Field (CVSS 7.2)
• CVE-2026-97286 — WordPress Strong Testimonials plugin <= 3.3.11 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
• CVE-2026-92622 — Strong Testimonials <= 3.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'lightbox_class' Shortcode Attribute (CVSS 6.4)
• CVE-2026-3239 — Strong Testimonials <= 3.2.21 - Authenticated (Contributor+) Stored Cross-Site Scripting via testimonial_view Shortcode (CVSS 6.4)
• CVE-2026-24957 — WordPress Strong Testimonials plugin <= 3.2.20 - Broken Access Control vulnerability (CVSS 6.5)
• CVE-2025-14426 — Strong Testimonials <= 3.2.18 - Missing Authorization to Authenticated (Contributor+) Rating Meta Update (CVSS 4.3)
• CVE-2025-11268 — Strong Testimonials <= 3.2.16 - Unauthenticated Arbitrary Shortcode Execution (CVSS 4.3)
• CVE-2025-7367 — Strong Testimonials <= 3.2.11 - Authenticated (Author+) Stored Cross-Site Scripting via Custom Fields (CVSS 6.4)
• CVE-2025-26975 — WordPress Strong Testimonials plugin <= 3.2.3 - Broken Access Control vulnerability (CVSS 5.3)
• CVE-2024-47362 — WordPress Strong Testimonials plugin <= 3.1.16 - Broken Access Control vulnerability (CVSS 8.8)
• CVE-2023-6491 — Strong Testimonials <= 3.1.12 - Authenticated(Contributor+) Improper Authorization to Views Modification (CVSS 4.3)
• CVE-2024-3261 — Strong Testimonials < 3.1.12 - Contributor+ Stored XSS (CVSS 4.8)
• CVE-2023-52123 — WordPress Strong Testimonials Plugin <= 3.1.10 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 8.8)
• CVE-2023-26013 — WordPress Strong Testimonials Plugin <= 3.0.2 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.4)
• CVE-2020-8549 — (CVSS 6.1)