Testimonials Widget vulnerabilities
We track 1 vulnerability in Testimonials Widget products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 26, 2026.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest Testimonials Widget vulnerabilities
- 7.5 High severity
Testimonials Widget: Missing Authorization
The Testimonials Widget WordPress plugin through 4.0.4 does not perform a capability or ownership check when handling its front-end testimonial submission form, allowing unauthenticated users to modify or create arbitrary posts, including overwriting the title