Strong testimonials

This hub aggregates every CVE we track for Strong testimonials, a product in the web cms plugins space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 13 most recently published vulnerabilities affecting Strong testimonials.

• CVE-2026-3239Strong Testimonials <= 3.2.21 - Authenticated (Contributor+) Stored Cross-Site Scripting via testimonial_view Shortcode6.4Apr 8, 2026
• CVE-2026-24957WordPress Strong Testimonials plugin <= 3.2.20 - Broken Access Control vulnerability6.5Feb 3, 2026
• CVE-2025-14426Strong Testimonials <= 3.2.18 - Missing Authorization to Authenticated (Contributor+) Rating Meta Update4.3Dec 30, 2025
• CVE-2025-11268Strong Testimonials <= 3.2.16 - Unauthenticated Arbitrary Shortcode Execution4.3Nov 6, 2025
• CVE-2025-7367Strong Testimonials <= 3.2.11 - Authenticated (Author+) Stored Cross-Site Scripting via Custom Fields6.4Jul 15, 2025
• CVE-2025-26975WordPress Strong Testimonials plugin <= 3.2.3 - Broken Access Control vulnerability5.3Feb 25, 2025
• CVE-2024-47362WordPress Strong Testimonials plugin <= 3.1.16 - Broken Access Control vulnerability4.3Nov 1, 2024
• CVE-2023-6491Strong Testimonials <= 3.1.12 - Authenticated(Contributor+) Improper Authorization to Views Modification4.3Jun 7, 2024
• CVE-2024-3261Strong Testimonials < 3.1.12 - Contributor+ Stored XSS4.8Apr 24, 2024
• CVE-2023-52123WordPress Strong Testimonials Plugin <= 3.1.10 is vulnerable to Cross Site Request Forgery (CSRF)4.3Jan 5, 2024
• CVE-2023-26013WordPress Strong Testimonials Plugin <= 3.0.2 is vulnerable to Cross Site Scripting (XSS)6.5Jun 16, 2023
• CVE-2022-4717Strong Testimonials < 3.0.3 - Contributor+ Stored XSS via Shortcode5.4Feb 6, 2023
• CVE-2020-8549Stored XSS in the Strong Testimonials plugin before 2.40.1 for WordPress can result in an attacker performing malicious actions such as stealing session tokens.6.1Feb 3, 2020