TC Testimonials
TC Testimonials has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for TC Testimonials has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.
All of these findings were reported by Muhammad Yudha - DJ. TC Testimonials is installed on roughly 300 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.7.7.
CVE-2025-49410TC Testimonials <= 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Read the full analysisVulnerability Records

TC Testimonials
Author
Imran Emu
Testimonial Slider carousel is an easy plugin to display testimonials of clients,business partners or affiliates along with title, URL on your website. Responsive design and easy to embed in any post or page using shortcode [tc-testimonial] . also can be add in themes PHP template using View live Demos » Documentations » Support » How To Create A Website » Plugin Features: Easy installable. Fully Responsive. Supported all Modern browsers Powered By OWL carousel 2 . Custom post type . Work with all WordPress theme. Developer friendly & easy to customize. Background , Text , Navigation , Dots , Middle border and Quote Icon color are change able through the setting panel . You can hide or show nav,dots and middle horizontal line. you can define Number number of columns for desktop and Tablet screens. Watch the video tutorial (free version) Use following shortcode to display clients, partners or sponsors Testimonials. Basic Usages [tc-testimonial] Show Testimonial carousel of any category [tc-testimonial category="category-slug"]
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C