Vulnerabilities

TI-2024-31680 CVE-2024-47362 · GHSA-3fpf-rc46-9vm6

WordPress Strong Testimonials plugin <= 3.1.16 - Broken Access Control vulnerability

LOW 38

Missing Authorization vulnerability in WP Chill Strong Testimonials strong-testimonials.This issue affects Strong Testimonials: from n/a through <= 3.1.16.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00398 Published 2024-11-01 No fix listed CWE-862

TI-2023-05948 CVE-2023-6491 · GHSA-3q9p-8qv6-vmjm

Strong Testimonials <= 3.1.12 - Authenticated(Contributor+) Improper Authorization to Views Modification

LOW 20

The Strong Testimonials plugin for WordPress is vulnerable to unauthorized modification of data due to an improper capability check on the wpmtst_save_view_sticky function in all versions up to, and including, 3.1.12.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0028 Published 2024-06-07 No fix listed CWE-284

TI-2024-03058 CVE-2024-3261 · GHSA-fcw6-ccq2-f46p

Strong Testimonials < 3.1.12 - Contributor+ Stored XSS

MEDIUM 55

The Strong Testimonials WordPress plugin before 3.1.12 does not validate and escape some of its Testimonial fields before outputting them back in a page/post, which could allow users with the contributor role and above t…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00399 Published 2024-04-24 Fixed in 3.1.12 CWE-79

TI-2023-28562 CVE-2023-52123 · GHSA-wqfq-9j6f-q6v9

WordPress Strong Testimonials Plugin <= 3.1.10 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 37

Cross-Site Request Forgery (CSRF) vulnerability in WPChill Strong Testimonials.This issue affects Strong Testimonials: from n/a through 3.1.10.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00227 Published 2024-01-05 No fix listed CWE-352

TI-2023-11254 CVE-2023-26013 · GHSA-xcg6-cfg8-97xf

WordPress Strong Testimonials Plugin <= 3.0.2 is vulnerable to Cross Site Scripting (XSS)

LOW 29

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in WPChill Strong Testimonials plugin <= 3.0.2 versions.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.0037 Published 2023-06-16 No fix listed CWE-79

TI-2020-06850 CVE-2020-8549 · GHSA-4x75-37xv-wgwv

Stored XSS in the Strong Testimonials plugin before 2.40.1 for WordPress can result in an…

LOW 31

Stored XSS in the Strong Testimonials plugin before 2.40.1 for WordPress can result in an attacker performing malicious actions such as stealing session tokens.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01879 Published 2020-02-03 No fix listed CWE-79