WH Testimonials
WH Testimonials has one disclosed vulnerability in the WordSec catalog, all reported in 2023; it remains unpatched as of September 2026. Their average CVSS score is 7.2, and the most serious one scores 7.2 out of 10. Severity breakdown: 0 critical and 1 high.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for WH Testimonials has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2023.
All of these findings were reported by Daniel Kelley. WH Testimonials is installed on roughly 30 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 3.3.2.
CVE-2023-1372WH Testimonials <= 3.0.0 - Unauthenticated Stored Cross-Site Scripting
Read the full analysisVulnerability Records
WH Testimonials
Author
webhostings
We have developed a new plugin for WordPress with a 5 incredible features. The testimonials on your website can be managed and displayed very professionally using our plugin. Also the whole layout of your WordPress page can be made to look incredible by using this plugin as it gives you two different options to change the design. The plugin includes the option to display a random testimonial in your sidebar using PHP code or the built-in widget. Testimonials can also be displayed all on one page. Simply put [Wh-testimonials] in the body of the page. Testimonials can also be added from front end. Simply put [Wh-testimonials_add] in the body of the page. Support
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C