Live › vulnerability › CVE-2026-112843
Go to dashboardThe Strong Testimonials WordPress plugin, through version 3.3.14, has a missing authorization check on an access control path. An attacker may be able to perform actions they should not be allowed to perform.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Sites running the Strong Testimonials WordPress plugin at version 3.3.14 or earlier are affected. Sites that do not use this plugin can skip it. The sources do not say which specific roles or settings make an install reachable.
No product ranges from the sources yet.
wp plugin get strong-testimonials --field=version3.3.14; the exact fixed version is unknown from the sourcesEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Missing Authorization vulnerability in WP Chill Strong Testimonials strong-testimonials allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Strong Testimonials: from n/a through 3.3.14.
This page as .md · .json · in your agent: get_signal("CVE-2026-112843")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.