CVE-2026-112843: WordPress Strong Testimonials plugin <= 3.3.14 - Broken Access Control vulnerability
Missing Authorization vulnerability in WP Chill Strong Testimonials strong-testimonials allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Strong Testimonials: from n/a through 3.3.14.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress Strong Testimonials (strong-testimonials)to a version that resolves this vulnerability.Fixed in 3.3.15
Event History
Frequently Asked Questions
Who can exploit this issue?
An attacker needs an account with at least low-level privileges, as indicated by the PR:L vector. No user interaction is required, and the issue can be reached over the network.
What versions should be treated as affected?
Strong Testimonials versions through 3.3.14 are affected. The available information does not identify a fixed version.
What is the expected impact if exploitation succeeds?
The stated impact is unauthorized modification of data or settings, reflected by an integrity impact of Low. No confidentiality or availability impact is listed.