This page lists publicly disclosed CVE vulnerabilities affecting wpchill strong_testimonials (linked via NVD CPE). Each row includes severity scores, summaries, and publication dates to help identify and analyze security issues.
| CVE | Summary | Source | Max CVSS | EPSS % | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2024-47362 | Missing Authorization vulnerability in WP Chill Strong Testimonials strong-testimonials.This issue affects Strong Testimonials: from n/a through <= 3.1.16. | [email protected] | 4.3 | 0.81% | 2024-11-01 | 2026-04-23 |
| CVE-2023-6491 | The Strong Testimonials plugin for WordPress is vulnerable to unauthorized modification of data due to an improper capability check on the wpmtst_save_view_sticky function in all versions up to, and including, 3.1.12. This makes it possible for authenticated attackers, with contributor access and above, to modify favorite views. | [email protected] | 4.3 | 0.19% | 2024-06-07 | 2026-04-08 |
| CVE-2024-3261 | The Strong Testimonials WordPress plugin before 3.1.12 does not validate and escape some of its Testimonial fields before outputting them back in a page/post, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks. The attack requires a specific view to be performed | [email protected] | 4.8 | 0.15% | 2024-04-24 | 2025-05-08 |
| CVE-2023-52123 | Cross-Site Request Forgery (CSRF) vulnerability in WPChill Strong Testimonials.This issue affects Strong Testimonials: from n/a through 3.1.10. | [email protected] | 4.3 | 0.08% | 2024-01-05 | 2026-04-28 |
| CVE-2023-26013 | Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in WPChill Strong Testimonials plugin <= 3.0.2 versions. | [email protected] | 6.5 | 0.08% | 2023-06-16 | 2024-11-21 |
| CVE-2020-8549 | Stored XSS in the Strong Testimonials plugin before 2.40.1 for WordPress can result in an attacker performing malicious actions such as stealing session tokens. | [email protected] | 6.1 | 0.56% | 2020-02-03 | 2024-11-21 |