WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
testimonial-slider-and-showcase
Published
2024-03-25
Title
Testimonial Slider < 2.3.8 - Admin+ Stored XSS
Slug
testimonial-slider-shortcode
Published
2023-09-25
Title
Testimonial Slider Shortcode < 1.1.9 - Contributor+ Stored XSS
Slug
testimonial-slider-shortcode
Published
2024-11-08
Title
Testimonial Slider Shortcode <= 1.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
testimonial-slider-showcase-pro
Published
2025-04-09
Title
Testimonial Slider And Showcase Pro <= 2.3.15 - Unauthenticated Local File Inclusion
Slug
testimonial-slider-showcase-pro
Published
2025-04-14
Title
Testimonial Slider And Showcase Pro <= 2.1.7 - Authenticated (Subscriber+) Local File Inclusion
Slug
testimonial-widgets
Published
2023-07-14
Title
WP Testimonials < 1.4.3 - Widget Deletion via CSRF
Slug
testimonial-widgets
Published
2024-01-12
Title
WP Testimonials < 1.4.4 - Authenticated (Contributor+) SQL Injection
Slug
testimonials
Published
2022-07-19
Title
Testimonials <= 3.0.1 - Contributor+ Stored Cross-Site Scripting
Slug
testimonials-carousel-elementor
Published
2024-05-17
Title
Testimonial Carousel For Elementor < 10.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
testimonials-carousel-elementor
Published
2024-05-24
Title
Testimonial Carousel For Elementor < 10.2.1 - Missing Authorization to Limited Setting Update
Slug
testimonials-carousel-elementor
Published
2024-05-29
Title
Testimonial Carousel For Elementor < 10.2.3 - Contributor+ Stored XSS
Slug
testimonials-carousel-elementor
Published
2025-10-24
Title
Testimonial Carousel For Elementor < 11.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
Slug
testimonials-creator
Published
2026-01-13
Title
Testimonials Creator 1.6 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
testimonials-showcase
Published
2025-06-05
Title
Testimonials Showcase < 1.9.18 - Missing Authorization
Slug
testimonials-showcase
Published
2025-07-03
Title
Testimonials Showcase < 1.9.18 - Reflected Cross-Site Scripting
Slug
testimonials-widget
Published
2020-07-03
Title
Testimonials Widget < 4.0.0 - Multiple Authenticated Stored XSS
Slug
testimonials-widget
Published
2024-06-05
Title
Testimonials Widget <= 4.0.4 - Authenticated (Author+) Stored Cross-Site Scripting via testimonials Shortcode
Slug
testimonials-widget
Published
2024-07-06
Title
Testimonials Widget <= 4.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
text-advertisements
Published
2024-11-08
Title
Text Advertisements <= 2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
text-hover
Published
2022-03-28
Title
Text Hover < 4.2 - Admin+ Stored Cross-Site Scripting
Slug
text-selection-color
Published
2025-03-28
Title
Text Selection Color <= 1.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
text-to-audio
Published
2025-09-22
Title
Text To Speech TTS Accessibility < 1.9.31 - Missing Authorization
Slug
textboxes
Published
2024-10-24
Title
Textboxes <= 0.1.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
textbuilder
Published
2025-10-02
Title
TextBuilder 1.0.0 - 1.1.1 - Cross-Site Request Forgery to Privilege Escalation via Account Takeover
Slug
texteller
Published
2025-01-16
Title
Texteller <= 1.3.0 - Reflected Cross-Site Scripting