Advisories · Technology
wpchill Strong Testimonials.
Every CVE that names wpchill Strong Testimonials among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.2 High
Strong Testimonials <= 3.3.16 - Unauthenticated Stored Cross-Site Scripting via 'star_rating' Parameter
- wpchill Strong Testimonials
- Cross-site scripting (XSS)
- CVSS 7.2 High
Strong Testimonials <= 3.3.11 - Unauthenticated Stored Cross-Site Scripting via 'platform_user_photo' Custom Field
- wpchill Strong Testimonials
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Strong Testimonials <= 3.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'lightbox_class' Shortcode Attribute
- wpchill Strong Testimonials
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Strong Testimonials <= 3.2.21 - Authenticated (Contributor+) Stored Cross-Site Scripting via testimonial_view Shortcode
- wpchill Strong Testimonials
- Cross-site scripting (XSS)
- CVSS 4.3 Medium
Strong Testimonials <= 3.2.18 - Missing Authorization to Authenticated (Contributor+) Rating Meta Update
- wpchill Strong Testimonials
- Broken access control
- CVSS 4.3 Medium
Strong Testimonials <= 3.2.16 - Unauthenticated Arbitrary Shortcode Execution
- wpchill Strong Testimonials
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Strong Testimonials <= 3.2.11 - Authenticated (Author+) Stored Cross-Site Scripting via Custom Fields
- wpchill Strong Testimonials
- Cross-site scripting (XSS)
- CVSS 4.3 Medium
Strong Testimonials <= 3.1.12 - Authenticated(Contributor+) Improper Authorization to Views Modification
- wpchill Strong Testimonials
- Broken access control
- CVSS 4.3 Medium
WordPress Strong Testimonials Plugin <= 3.1.10 is vulnerable to Cross Site Request Forgery (CSRF)
- WPChill Strong Testimonials
- Cross-site request forgery (CSRF)
- CVSS 6.5 Medium
WordPress Strong Testimonials Plugin <= 3.0.2 is vulnerable to Cross Site Scripting (XSS)
- WPChill Strong Testimonials
- Cross-site scripting (XSS)