Awesome Testimonials
Awesome Testimonials has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 4.3, and the most serious one scores 4.3 out of 10.
The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (100%).
The one issue recorded for Awesome Testimonials has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.
All of these findings were reported by Nguyen Xuan Chien. Awesome Testimonials is installed on roughly 50 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.0.14.
CVE-2025-62933Awesome Testimonials <= 2.2.1 - Cross-Site Request Forgery
Read the full analysisVulnerability Records

Awesome Testimonials
Author
Prakash
Awesome Testimonial Plugin for WordPress built to display testimonials, client quotes or reviews with variety styles on any post, page, custom template, widget, etc A FEW FEATURES ARE Fade, Crossfade, Scroll, Cover, and Uncover effects Widget Ready With just a shortcode, create a list page for testimonial Mobile-Friendly and Responsive – Simple to Customize Simple to Use Start ratings are available Rate The Plugin I’d love to hear from you!
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C