TI-2025-13136 CVE-2025-14379 · GHSA-2868-cmpj-p9jr
Testimonials Creator 1.6 - Authenticated (Admin+) Stored Cross-Site Scripting
Priority LOW 20
The Testimonials Creator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in version 1.6 due to insufficient input sanitization and output escaping.