WPChill Strong Testimonials

• CVE-2026-115811 High 7.2 Strong Testimonials <= 3.3.16 - Unauthenticated Stored Cross-Site Scripting via 'star_rating' Parameter –
• CVE-2026-96650 High 7.2 Strong Testimonials <= 3.3.11 - Unauthenticated Stored Cross-Site Scripting via 'platform_user_photo' Custom Field 0.3%
• CVE-2026-92622 Medium 6.4 Strong Testimonials <= 3.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'lightbox_class' Shortcode Attribute 0.3%
• CVE-2026-3239 Medium 6.4 Strong Testimonials <= 3.2.21 - Authenticated (Contributor+) Stored Cross-Site Scripting via testimonial_view Shortcode 0.2%
• CVE-2025-14426 Medium 4.3 Strong Testimonials <= 3.2.18 - Missing Authorization to Authenticated (Contributor+) Rating Meta Update 0.2%
• CVE-2025-11268 Medium 4.3 Strong Testimonials <= 3.2.16 - Unauthenticated Arbitrary Shortcode Execution 0.3%
• CVE-2025-7367 Medium 6.4 Strong Testimonials <= 3.2.11 - Authenticated (Author+) Stored Cross-Site Scripting via Custom Fields 0.3%
• CVE-2023-6491 Medium 4.3 Strong Testimonials <= 3.1.12 - Authenticated(Contributor+) Improper Authorization to Views Modification 0.3%
• CVE-2023-52123 Medium 4.3 WordPress Strong Testimonials Plugin <= 3.1.10 is vulnerable to Cross Site Request Forgery (CSRF) 0.2%
• CVE-2023-26013 Medium 6.5 WordPress Strong Testimonials Plugin <= 3.0.2 is vulnerable to Cross Site Scripting (XSS) 0.4%