4.3
Moyenne
CVE-2025-11268 The Strong Testimonials plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and…
Description
The Strong Testimonials plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 3.2.16. This is due to the software allowing users to submit a testimonial in which a value is not properly validated or sanitized prior to being passed to a do_shortcode call. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes if an administrator previews or publishes a crafted testimonial.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Strong Testimonials 3.2 | premières → 3.2.16 | Pas de correctif indiqué |
Autres CVE de Strong Testimonials
Les 11 CVE de Strong Testimonials →
CVE-2026-115811
Strong Testimonials <= 3.3.16 - Unauthenticated Stored Cross-Site Scripting via 'star_rating' Parameter
7.2
Élevée
CVE-2026-96650
The Strong Testimonials plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'platform_user_photo'…
7.2
Élevée
CVE-2026-92622
The Strong Testimonials plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'lightbox_class' Shortcode…
6.4
Moyenne
CVE-2026-3239
The Strong Testimonials plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's…
6.4
Moyenne