Testimonial – Testimonial Slider, Reviews Slider, Testimonial By AI

Testimonial – Testimonial Slider, Reviews Slider, Testimonial By AI has 4 disclosed vulnerabilities in the WordSec catalog, reported between 2024 and 2025; 2 are fixed and 2 remain unpatched as of September 2026. Their average CVSS score is 5.4, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 1 high. 2025 was the busiest year with 3 disclosures.

The most common weakness is Missing Authorization, behind 2 of the records (50%). Other recurring categories include Cross-Site Scripting, Deserialization Of Untrusted Data.

2 of the records (50%) have a vendor fix, while 2 remain unpatched. The oldest unresolved one dates back to 2025.

3 independent researchers contributed these findings, most of them (2) reported by Abu Hurayra (HurayraIIT).

01234567891025.03.2024Today25.03.20244.4Testimonial Slider <= 2.3.7 - Authenticated (Admin+) Stored Cross-Site Scripting CVSS 4.4 · 25.03.202403.04.20258.8Testimonial Slider <= 2.0.13 - Authenticated (Contributor+) PHP Object Injection CVSS 8.8 · 03.04.202505.10.20254.3Testimonial Slider <= 2.0.15 - Missing Authorization CVSS 4.3 · 05.10.202525.12.20254.3Testimonial Slider <= 2.0.15 - Missing Authorization CVSS 4.3 · 25.12.2025

Strategic Overview

Avg CVSSMedium
5.4/ 10
Patch Coverage50%
Open

2

Fixed

2

Get automatic notifications for all Testimonial – Testimonial Slider, Reviews Slider, Testimonial By AI vulnerabilities before they are exploited.

Most severe open issueCVSS 4.3CVE-2025-68000

Testimonial Slider <= 2.0.15 - Missing Authorization

Read the full analysis

Vulnerability Records

4 records
Showing 1–4 of 4 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C