Strong Testimonials

Vulnerabilities 19Slug strong-testimonialsLatest version 3.2.22WordPress.org →

Minimum safe version

3.2.22

Update to 3.2.22 or later to address 19 fixable vulnerabilities

Latest available3.2.22 ✓
N/A
2026-04-07< 3.2.22

Strong Testimonials <= 3.2.21 - Authenticated (Contributor+) Stored Cross-Site Scripting via testimonial_view Shortcode

WordfenceCVE
Medium 6.4
2025-07-15< 3.2.12

Strong Testimonials <= 3.2.11 - Authenticated (Author+) Stored Cross-Site Scripting via Custom Fields

EUVDWordfenceCVE
Medium 4.3
2024-12-28< 3.1.11

WordPress Strong Testimonials Plugin <= 3.1.10 is vulnerable to Cross Site Request Forgery (CSRF)

PatchstackCVEWordfenceWPScan
N/A
< 2.51.3

Strong Testimonials &lt; 2.51.3 - Unauthorised AJAX Call

WPScan
N/A
< 2.31.5

Strong Testimonials &lt;= 2.31.4 - Multiple Authenticated Cross-Site Scripting (XSS)

WPScan
N/A
2018-07-24< 2.31.5

Strong Testimonials <= 2.31.4 - Reflected Cross-Site Scripting

Wordfence
N/A
2021-06-30< 2.51.3

Strong Testimonials <= 2.51.2 - Authorization Bypass

Wordfence
N/A
2018-08-09< 2.31.5

WordPress Strong Testimonials plugin <= 2.31.4 - Multiple Authenticated Cross-Site Scripting (XSS) vulnerabilities

Patchstack
N/A
2020-02-01< 2.40.1

WordPress Strong Testimonials plugin <= 2.40.0 - Stored Cross Site Scripting (XSS) vulnerability

Patchstack