Plugin icon

Testimonials Widget

testimonials-widget
Plugin closed

Vulnerabilities:

5

Last Updated:

May 3, 2022

Active Installs:

20000

Published
Title
Fixed in
CVSS
Published
2026-09-24
Title
Testimonials Widget <= 4.0.4 - Unauthenticated Arbitrary Post Update
Fixed in
No known fix
CVSS
7.5 (high)
Published
2026-09-24
Title
Testimonials Widget <= 4.0.4 - Unauthenticated SSRF via Featured Image URL
Fixed in
No known fix
CVSS
5.8 (medium)
Published
2024-07-06
Title
Testimonials Widget <= 4.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
No known fix
CVSS
6.4 (medium)
Published
2024-06-05
Title
Testimonials Widget <= 4.0.4 - Authenticated (Author+) Stored Cross-Site Scripting via testimonials Shortcode
Fixed in
No known fix
CVSS
6.4 (medium)
Published
2020-07-03
Title
Testimonials Widget < 4.0.0 - Multiple Authenticated Stored XSS
Fixed in
Fixed in 4.0.0
CVSS
5.5 (medium)