Skip to content

Known vulnerabilities in ShapedPlugin Real Testimonials – Testimonial Slider, Collect Customer Reviews and Video Testimonials

Is your version affected?

CVE Summary Score Published
CVE-2026-120509 Real Testimonials <= 4.1.0 - Unauthenticated Stored Cross-Site Scripting via 'tpro_client_name' Parameter 4.7 Medium Nov 7, 2026
CVE-2026-120685 Real Testimonials <= 4.1.0 - Unauthenticated Stored Cross-Site Scripting via JPEG IPTC Caption + '[gallery]' Shortcode Chain 5.4 Medium Nov 7, 2026
CVE-2026-120683 Real Testimonials <= 4.1.0 - Unauthenticated Stored Cross-Site Scripting via Testimonial Submission Form 'tpro_client_testimonial' Parameter 5.4 Medium Nov 7, 2026

Other ShapedPlugin products