WPChill Strong Testimonials vulnerabilities
10 published CVEs name WPChill Strong Testimonials among the affected products.
- 10Published CVEs10 of them scored
- 5Last 12 monthspublished in the last year
- 0Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-115811
Strong Testimonials <= 3.3.16 - Unauthenticated Stored Cross-Site Scripting via 'star_rating' Parameter
wpchill · Strong Testimonials
High7.2 - CVE-2026-96650
Strong Testimonials <= 3.3.11 - Unauthenticated Stored Cross-Site Scripting via 'platform_user_photo' Custom Field
wpchill · Strong Testimonials
High7.2 - CVE-2026-92622
Strong Testimonials <= 3.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'lightbox_class' Shortcode Attribute
wpchill · Strong Testimonials
Medium6.4 - CVE-2026-3239
Strong Testimonials <= 3.2.21 - Authenticated (Contributor+) Stored Cross-Site Scripting via testimonial_view Shortcode
wpchill · Strong Testimonials
Medium6.4 - CVE-2025-14426
Strong Testimonials <= 3.2.18 - Missing Authorization to Authenticated (Contributor+) Rating Meta Update
wpchill · Strong Testimonials
Medium4.3 - CVE-2025-11268
Strong Testimonials <= 3.2.16 - Unauthenticated Arbitrary Shortcode Execution
wpchill · Strong Testimonials
Medium4.3 - CVE-2025-7367
Strong Testimonials <= 3.2.11 - Authenticated (Author+) Stored Cross-Site Scripting via Custom Fields
wpchill · Strong Testimonials
Medium6.4 - CVE-2023-6491
Strong Testimonials <= 3.1.12 - Authenticated(Contributor+) Improper Authorization to Views Modification
wpchill · Strong Testimonials
Medium4.3 - CVE-2023-52123
WordPress Strong Testimonials Plugin <= 3.1.10 is vulnerable to Cross Site Request Forgery (CSRF)
WPChill · Strong Testimonials
Medium4.3 - CVE-2023-26013
WordPress Strong Testimonials Plugin <= 3.0.2 is vulnerable to Cross Site Scripting (XSS)
WPChill · Strong Testimonials
Medium6.5