CVE-2026-110371: WordPress Strong Testimonials plugin <= 3.3.12 - Broken Access Control vulnerability

Q: Who can exploit this issue?

The CVSS vector indicates that an attacker needs network access and low-level privileges. No user interaction is required.

Q: What is the potential impact?

Successful exploitation can result in limited disclosure of confidential information. The provided assessment indicates no integrity or availability impact.

Q: Which versions are affected?

Strong Testimonials versions through 3.3.12 are affected. The available data does not identify a fixed version.

Published Oct 15, 2026

Updated

Missing Authorization vulnerability in WP Chill Strong Testimonials strong-testimonials allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Strong Testimonials: from n/a through 3.3.12.

Affected Software

1 affected component

WP Chill Strong Testimonials<=3.3.12

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade wordpress/strong-testimonials to a version that resolves this vulnerability.
Fixed in 3.3.13

Event History

Oct 15, 2026

CVE Published

via MITRE·05:43 PM

Data Sourced

via MITRE·05:43 PM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this issue?

The CVSS vector indicates that an attacker needs network access and low-level privileges. No user interaction is required.

What is the potential impact?