BNE Testimonials
BNE Testimonials has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2026; all 3 are fixed as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10. 2026 was the busiest year with 2 disclosures.
The most common weakness is Cross-Site Scripting, behind 3 of the records (100%).
Every one of the 3 issues recorded for BNE Testimonials has a vendor fix available, so running the current release closes all known holes.
3 independent researchers contributed these findings, one record each. BNE Testimonials is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.
CVE-2026-15245BNE Testimonials <= 2.0.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Read the full analysisVulnerability Records
BNE Testimonials
Author
Kerry
BNE Testimonials makes it easy to add Testimonials and Reviews to any Page using a shortcode or in a sidebar (widget area) using the provided widgets. Each testimonial includes a title, image, tagline, website URL, and message. You can also separate your testimonials into different groups (categories). BNE Testimonials will inherit the styling from your theme – just install and get to work adding your testimonials and reviews! Display your testimonials as a List: Shortcode: [bne_testimonials layout=”list”] Testimonials will be shown vertically as a traditional list. Display your testimonials as a Slider Shortcode: [bne_testimonials layout=”slider”] Testimonials will be shown in a rotating slider. To remove the styling of the slider, include theme=”simple” as a shortcode option. Pro Features Include We have a PRO version of BNE Testimonials on our website. Features include: API Access: Display testimonials on multiple WordPress websites from a single source. Yelp, Google Places, and Facebook Reviews: Use their API to bring in reviews and display them on your website using any of the layouts Aggregated Review Badges for Yelp, Google, Facebook, and Custom branding. Automatically calculates your rating and total testimonials published. Additional Layouts: Masonry Grid and Thumbnail Slider Additional Themes: Bubble and Cards Shortcode Generator Custom styling 5 Star Ratings Truncated (shorten) text Schema.org tags and meta for online search Front-end submission form with email notification Pagination for list and masonry layouts Automatic updates to new versions Numerous filters/hooks for developers Priority support View the PRO Demo Why Do I Need Testimonials on my Website? Testimonials are a great way to strengthen your brand and reliability with new customers. Testimonials help potential customers get to know that you are a trustworthy business. Testimonials give you the opportunity to point out specific features or compelling reasons why a customer should buy from you. Testimonials, when used effectively, are a great tool to increase conversions rates on your website!
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C