CVE-2026-109897: WordPress Strong Testimonials plugin <= 3.3.12 - Broken Access Control vulnerability
Missing Authorization vulnerability in WP Chill Strong Testimonials strong-testimonials allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Strong Testimonials: from n/a through 3.3.12.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
wordpress/strong-testimonialsto a version that resolves this vulnerability.Fixed in 3.3.13
Event History
Frequently Asked Questions
What level of access does an attacker need to exploit this issue?
The vulnerability requires low-level privileges. It is remotely exploitable and does not require user interaction.
Which installations may be affected?
WP Chill Strong Testimonials versions through 3.3.12 are identified as affected. The available information does not specify whether any particular WordPress role, plugin setting, or default configuration is required.
What is the potential impact?
Successful exploitation may allow unauthorized modification of data and may affect availability. No confidentiality impact is identified by the supplied CVSS vector.