CVE-2025-47467: WordPress GS Testimonial Slider plugin <= 3.3.0 - Broken Access Control Vulnerability
Missing Authorization vulnerability in GS Plugins GS Testimonial Slider allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects GS Testimonial Slider: from n/a through 3.3.0.
Other sources
Missing Authorization vulnerability in GS Plugins GS Testimonial Slider gs-testimonial allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GS Testimonial Slider: from n/a through <= 3.3.0.
— MITRE
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-47467?
CVE-2025-47467 has a medium severity rating due to its potential to exploit misconfigured access control settings.
How do I fix CVE-2025-47467?
To fix CVE-2025-47467, update the GS Testimonial Slider plugin to version 3.3.1 or later.
What is the impact of CVE-2025-47467?
The impact of CVE-2025-47467 allows unauthorized users to access restricted functionality due to missing authorization checks.
Which versions of the GS Testimonial Slider are affected by CVE-2025-47467?
CVE-2025-47467 affects GS Testimonial Slider versions up to and including 3.3.0.
Is CVE-2025-47467 relevant for WordPress sites using GS Testimonial Slider?
Yes, CVE-2025-47467 is relevant for WordPress sites that have the GS Testimonial Slider plugin installed up to version 3.3.0.