Live › vulnerability › CVE-2026-114706
The Strong Testimonials WordPress plugin by WP Chill fails to neutralize input, allowing stored cross-site scripting. An attacker who can submit content can run scripts in the browsers of people who view the affected page.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-29 15:25 UTC. All times on this page are UTC.
Sites running the Strong Testimonials WordPress plugin version 3.3.15 or earlier are affected. The sources do not say which user roles can submit the stored input, so exposure depends on who can add or edit testimonials on the site.
No product ranges from the sources yet.
wp plugin get strong-testimonials --field=version3.3.15 or earlierEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Strong Testimonials strong-testimonials allows Stored XSS.This issue affects Strong Testimonials: from n/a through 3.3.15.
This page as .md · .json · in your agent: get_signal("CVE-2026-114706")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.