WP-Testimonials
WP-Testimonials has one disclosed vulnerability in the WordSec catalog, all reported in 2017; it remains unpatched as of September 2026. Their average CVSS score is 8.8, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 1 high.
The most common weakness is SQL Injection, behind 1 of the records (100%).
The one issue recorded for WP-Testimonials has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2017.
Most severe open issueCVSS 8.8
CVE-2017-9418WP-Testimonials <= 3.4.1 - SQL Injection
Read the full analysisVulnerability Records
1 records
Showing 1–1 of 1 reports
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C