Description
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Themepoints Testimonials plugin <= 2.6 on WordPress.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Themepoints | Testimonials (WordPress plugin) | <= 2.6 – ≤ 2.6 | — |
Medium · 4.8
CVE-2021-36858
EUVD-2021-23434GHSA-mm7p-j8qh-fwqg
WordPress Testimonials plugin <= 2.6 - Auth. Stored Cross-Site Scripting (XSS) vulnerability
Published Oct 28, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack