Skip to content
OpenAdvisories
High · 7.1 CVE-2026-107435 EUVD-2026-107136GHSA-2p4c-fhxq-6mq7

WordPress Strong Testimonials plugin <= 3.3.12 - Cross Site Scripting (XSS) vulnerability

Published Oct 21, 2026 · Updated Oct 21, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Strong Testimonials strong-testimonials allows Stored XSS.This issue affects Strong Testimonials: from n/a through 3.3.12.

Affected products

VendorProductAffectedFixed
WP Chill Strong Testimonials ≤ 3.3.12 —

References