Easy Testimonials

Easy Testimonials has 8 disclosed vulnerabilities in the WordSec catalog, reported between 2016 and 2024; 6 are fixed and 2 remain unpatched as of September 2026. Their average CVSS score is 6.0, and the most serious one scores 7.4 out of 10. Severity breakdown: 0 critical and 1 high. 2020 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Scripting, behind 7 of the records (88%). Other recurring categories include Cross-Site Request Forgery (CSRF).

6 of the records (75%) have a vendor fix, while 2 remain unpatched. The oldest unresolved one dates back to 2017.

8 independent researchers contributed these findings, one record each.

Strategic Overview

Avg CVSSMedium

6.0/ 10

Patch Coverage75%

Open

Fixed

Get automatic notifications for all Easy Testimonials vulnerabilities before they are exploited.

Most severe open issueCVSS 6.4CVE-2024-2337

Easy Testimonials <= 3.9.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

Read the full analysis

Vulnerability Records

8 records


2024-07-19 00:00	Easy Testimonials <= 3.9.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Easy Testimonials <= 3.9.5	`CVE-2024-2337`	6.4 Medium	Krzysztof Zając	No
2023-01-10 00:00	Easy Testimonials <= 3.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting Easy Testimonials <= 3.9.2	`CVE-2022-4577`	6.4 Medium	István Márton	Yes
2022-06-14 00:00	Easy Testimonials <= 3.8 - Reflected Cross-Site Scripting Easy Testimonials <= 3.8	`N/A`	6.1 Medium	WPScanTeam	Yes
2020-09-16 00:00	Easy Testimonials <= 3.6.1 - Cross-Site Request Forgery Bypass Easy Testimonials < 3.7	`CVE-2020-36749`	4.3 Medium	Jerome Bruandet	Yes
2020-05-13 00:00	Easy Testimonials <= 3.5.2 - Authenticated Stored Cross-Site Scripting Easy Testimonials <= 3.5.2	`CVE-2020-14959`	5.4 Medium	Ngo Van Thien	Yes
2018-11-26 00:00	Easy Testimonials <= 3.5.2 - Stored Cross-Site Scripting Easy Testimonials < 3.6	`CVE-2018-19564`	6.1 Medium	En_dust	Yes
2017-07-31 00:00	Easy Testimonials <= 3.0.4 - Cross-Site Scripting Easy Testimonials <= 3.0.4	`CVE-2017-12131`	6.1 Medium	ning1022	No
2016-07-31 00:00	Easy Testimonials <= 1.36.1 - Authenticated Stored Cross-Site Scripting Easy Testimonials < 1.37	`N/A`	7.4 High	Bente Schopman	Yes

Showing 1–8 of 8 reports