High
CVE-2026-96650
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 18
Reset filters
Medium
CVE-2026-97286
Strong Testimonials <= 3.3.11 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-92622
Strong Testimonials <= 3.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'lightbox_class' Shortcode Attribute
Medium
CVE-2026-3239
Strong Testimonials <= 3.2.21 - Authenticated (Contributor+) Stored Cross-Site Scripting via testimonial_view Shortcode
Medium
CVE-2025-14426
Strong Testimonials <= 3.2.18 - Missing Authorization to Authenticated (Contributor+) Rating Meta Update
Medium
CVE-2026-24957
Strong Testimonials <= 3.2.20 - Missing Authorization
Medium
CVE-2025-11268
Strong Testimonials <= 3.2.16 - Unauthenticated Arbitrary Shortcode Execution
Medium
CVE-2025-7367
Strong Testimonials <= 3.2.11 - Authenticated (Author+) Stored Cross-Site Scripting via Custom Fields
Medium
CVE-2025-26975
Strong Testimonials <= 3.2.3 - Missing Authorization
Medium
CVE-2024-47362
Strong Testimonials <= 3.1.16 - Missing Authorization
Medium
CVE-2023-6491
Strong Testimonials <= 3.1.12 - Authenticated(Contributor+) Improper Authorization to Views Modification
Medium
CVE-2024-3261
Strong Testimonials <= 3.1.11 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-52123
Strong Testimonials <= 3.1.10 - Cross-Site Request Forgery
Medium
CVE-2023-26013
Strong Testimonials <= 3.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodes
Medium
CVE-2022-4717
Strong Testimonials <= 3.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
ba4da955-7651-42e5-aefa-72c70a7b1035
Strong Testimonials <= 2.51.2 - Authorization Bypass
Medium
CVE-2020-8549
Strong Testimonials <= 2.40.0 - Stored Cross Site Scripting
Medium
c49c97cf-78e9-4da2-ab0d-ff014c29feaa
Strong Testimonials <= 2.31.4 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.