WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
testimonial-slider
Published
2018-01-10
Title
Testimonial Slider <= 1.2.4 - Authenticated SQL Injection
Slug
testimonial-slider
Published
2022-11-07
Title
Testimonial Slider < 1.3.2 - Stored XSS via CSRF
Slug
testimonial-slider
Published
2024-05-03
Title
Testimonial Slider < 1.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
testimonial-slider-and-showcase
Published
2024-03-05
Title
Testimonial Slider < 2.3.7 - Author+ Settings Update
Slug
testimonial-slider-and-showcase
Published
2024-03-25
Title
Testimonial Slider < 2.3.8 - Admin+ Stored XSS
Slug
testimonial-slider-shortcode
Published
2023-09-25
Title
Testimonial Slider Shortcode < 1.1.9 - Contributor+ Stored XSS
Slug
testimonial-slider-shortcode
Published
2024-11-08
Title
Testimonial Slider Shortcode <= 1.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
testimonial-slider-showcase-pro
Published
2025-04-09
Title
Testimonial Slider And Showcase Pro <= 2.3.15 - Unauthenticated Local File Inclusion
Slug
testimonial-slider-showcase-pro
Published
2025-04-14
Title
Testimonial Slider And Showcase Pro <= 2.1.7 - Authenticated (Subscriber+) Local File Inclusion
Slug
testimonial-widgets
Published
2023-07-14
Title
WP Testimonials < 1.4.3 - Widget Deletion via CSRF
Slug
testimonial-widgets
Published
2024-01-12
Title
WP Testimonials < 1.4.4 - Authenticated (Contributor+) SQL Injection
Slug
testimonials
Published
2022-07-19
Title
Testimonials <= 3.0.1 - Contributor+ Stored Cross-Site Scripting
Slug
testimonials-carousel-elementor
Published
2024-05-17
Title
Testimonial Carousel For Elementor < 10.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
testimonials-carousel-elementor
Published
2024-05-24
Title
Testimonial Carousel For Elementor < 10.2.1 - Missing Authorization to Limited Setting Update
Slug
testimonials-carousel-elementor
Published
2024-05-29
Title
Testimonial Carousel For Elementor < 10.2.3 - Contributor+ Stored XSS
Slug
testimonials-carousel-elementor
Published
2025-10-24
Title
Testimonial Carousel For Elementor < 11.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
Slug
testimonials-creator
Published
2026-01-13
Title
Testimonials Creator 1.6 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
testimonials-showcase
Published
2025-06-05
Title
Testimonials Showcase < 1.9.18 - Missing Authorization
Slug
testimonials-showcase
Published
2025-07-03
Title
Testimonials Showcase < 1.9.18 - Reflected Cross-Site Scripting
Slug
testimonials-widget
Published
2020-07-03
Title
Testimonials Widget < 4.0.0 - Multiple Authenticated Stored XSS
Slug
testimonials-widget
Published
2024-06-05
Title
Testimonials Widget <= 4.0.4 - Authenticated (Author+) Stored Cross-Site Scripting via testimonials Shortcode
Slug
testimonials-widget
Published
2024-07-06
Title
Testimonials Widget <= 4.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
testimonials-widget
Published
2026-09-24
Title
Testimonials Widget <= 4.0.4 - Unauthenticated Arbitrary Post Update
Slug
testimonials-widget
Published
2026-09-24
Title
Testimonials Widget <= 4.0.4 - Unauthenticated SSRF via Featured Image URL
Slug
text-advertisements
Published
2024-11-08
Title
Text Advertisements <= 2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting