Skip to content
OpenAdvisories
High · 8.8 CVE-2025-60126 EUVD-2025-31274GHSA-cp5p-c3cf-gr9m

WordPress Testimonial Slider Plugin <= 3.5.8.6 - Local File Inclusion Vulnerability

Published Sep 26, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in PluginOps Testimonial Slider testimonial-add allows PHP Local File Inclusion.This issue affects Testimonial Slider: from n/a through <= 3.5.8.6.

Affected products

VendorProductAffectedFixed
PluginOps Testimonial Slider ≤ 3.5.8.6 —

References