Plugin icon

WP Testimonials

testimonial-widgets
Plugin closed

Vulnerabilities:

3

Last Updated:

April 14, 2026

Active Installs:

10000

Published
Title
Fixed in
CVSS
Published
2026-10-10
Title
WP Testimonials <= 1.4.13 - Author+ Stored XSS via wp-testimonials Shortcode
Fixed in
No known fix
CVSS
6.8 (medium)
Published
2024-01-12
Title
WP Testimonials < 1.4.4 - Authenticated (Contributor+) SQL Injection
Fixed in
Fixed in 1.4.4
CVSS
8.8 (high)
Published
2023-07-14
Title
WP Testimonials < 1.4.3 - Widget Deletion via CSRF
Fixed in
Fixed in 1.4.3
CVSS
4.3 (medium)