Plugin icon

Strong Testimonials

strong-testimonials

Vulnerabilities:

14

Last Updated:

February 26, 2026

Active Installs:

90000

Published
Title
Fixed in
CVSS
Published
2025-12-29
Title
Strong Testimonials < 3.2.19 - Missing Authorization to Authenticated (Contributor+) Rating Meta Update
Fixed in
Fixed in 3.2.19
CVSS
4.3 (medium)
Published
2025-12-28
Title
Strong Testimonials < 3.2.21 - Missing Authorization
Fixed in
Fixed in 3.2.21
CVSS
4.3 (medium)
Published
2025-11-05
Title
Strong Testimonials < 3.2.17 - Unauthenticated Arbitrary Shortcode Execution
Fixed in
Fixed in 3.2.17
CVSS
4.3 (medium)
Published
2025-07-14
Title
Strong Testimonials < 3.2.12 - Authenticated (Author+) Stored Cross-Site Scripting via Custom Fields
Fixed in
Fixed in 3.2.12
CVSS
6.4 (medium)
Published
2025-02-23
Title
Strong Testimonials < 3.2.4 - Missing Authorization
Fixed in
Fixed in 3.2.4
CVSS
5.3 (medium)
Published
2024-09-30
Title
Strong Testimonials < 3.1.17 - Missing Authorization
Fixed in
Fixed in 3.1.17
CVSS
4.3 (medium)
Published
2024-06-06
Title
Strong Testimonials < 3.1.13 - Authenticated(Contributor+) Improper Authorization to Views Modification
Fixed in
Fixed in 3.1.13
CVSS
4.3 (medium)
Published
2024-04-03
Title
Strong Testimonials < 3.1.12 - Contributor+ Stored XSS
Fixed in
Fixed in 3.1.12
CVSS
5.1 (medium)
Published
2023-12-28
Title
Strong Testimonials < 3.1.11 - Settings Update via CSRF
Fixed in
Fixed in 3.1.11
CVSS
4.3 (medium)
Published
2023-02-21
Title
Strong Testimonials < 3.0.3 - Contributor+ Stored XSS
Fixed in
Fixed in 3.0.3
CVSS
6.8 (medium)
Published
2023-01-10
Title
Strong Testimonials < 3.0.3 - Contributor+ Stored XSS via Shortcode
Fixed in
Fixed in 3.0.3
CVSS
6.8 (medium)
Published
2021-06-30
Title
Strong Testimonials < 2.51.3 - Unauthorised AJAX Call
Fixed in
Fixed in 2.51.3
CVSS
4.3 (medium)
Published
2020-02-01
Title
Strong Testimonials < 2.40.1 - Stored Cross Site Scripting (XSS)
Fixed in
Fixed in 2.40.1
CVSS
6.1 (medium)
Published
2018-07-28
Title
Strong Testimonials <= 2.31.4 - Multiple Authenticated Cross-Site Scripting (XSS)
Fixed in
Fixed in 2.31.5
CVSS
n/a