WordPress plugin
Solid Testimonials – Testimonial Slider, Video Testimonials & Customer Reviews security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical0
- High1
- Medium8
- Low0
All Solid Testimonials – Testimonial Slider, Video Testimonials & Customer Reviews vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High7.5 | Authenticated (Contributor+) PHP Object Injection ≤3.3.10No patch available | CVE-2026-78527 | |
| Medium6.1 | Reflected DOM-Based Cross-Site Scripting via url Parameter ≤5.5.8Update to 5.5.9 | CVE-2024-13362 | |
| Medium6.5 | Unauthenticated Arbitrary Shortcode Execution ≤3.2.9Update to 3.3.0 | CVE-2025-47481 | |
| Medium4.3 | Missing Authorization ≤3.3.0Update to 3.3.1 | CVE-2025-47467 | |
| Medium6.4 | Authenticated (Contributor+) Stored Cross-Site Scripting ≤3.1.4Update to 3.1.5 | CVE-2024-30443 | |
| Medium4.3 | Missing Authorization ≤3.6.0Update to 3.6.1 | — | |
| Medium4.3 | Cross-Site Request Forgery ≤3.6.0Update to 3.6.1 | CVE-2022-47150 | |
| Medium6.4 | Authenticated (Contributor+) Stored Cross-Site Scripting ≤1.9.6Update to 1.9.7 | CVE-2022-40213 | |
| Medium6.4 | Authenticated (Author+) Stored Cross-Site Scripting ≤1.9.6Update to 1.9.7 | CVE-2022-35882 |
- High7.5Authenticated (Contributor+) PHP Object Injection
≤3.3.10No patch available
- Medium6.1Reflected DOM-Based Cross-Site Scripting via url Parameter
≤5.5.8Update to 5.5.9
- Medium6.5Unauthenticated Arbitrary Shortcode Execution
≤3.2.9Update to 3.3.0
- Medium4.3Missing Authorization
≤3.3.0Update to 3.3.1
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤3.1.4Update to 3.1.5
- Medium4.3Missing Authorization
≤3.6.0Update to 3.6.1
- Medium4.3Cross-Site Request Forgery
≤3.6.0Update to 3.6.1
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤1.9.6Update to 1.9.7
- Medium6.4Authenticated (Author+) Stored Cross-Site Scripting
≤1.9.6Update to 1.9.7
Solid Testimonials – Testimonial Slider, Video Testimonials & Customer Reviews: common questions
Does Solid Testimonials – Testimonial Slider, Video Testimonials & Customer Reviews have known vulnerabilities?
Yes. VulnCrest Radar lists 9 known vulnerabilities in Solid Testimonials – Testimonial Slider, Video Testimonials & Customer Reviews: 1 high, 8 medium. At least one is not fixed in the latest version.
How do I check which version of Solid Testimonials – Testimonial Slider, Video Testimonials & Customer Reviews I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Solid Testimonials – Testimonial Slider, Video Testimonials & Customer Reviews vulnerability?
CVE-2026-78527, published Oct 30, 2026: Solid Testimonials – Testimonial Slider, Video Testimonials & Customer Reviews <= 3.3.10 - Authenticated (Contributor+) PHP Object Injection. Severity: High (CVSS 7.5).
Is any Solid Testimonials – Testimonial Slider, Video Testimonials & Customer Reviews vulnerability listed in CISA KEV?
No. None of the known Solid Testimonials – Testimonial Slider, Video Testimonials & Customer Reviews vulnerabilities is currently listed in the CISA KEV catalog.