Stars Testimonials With Slider And Masonry Grid Vulnerabilities

The Stars Testimonials plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 3.3.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pag...

CVSS:

6.4

Affected:

up to 3.3.4

Fixed in:

3.3.5

Disclosed:

Nov 10, 2025

CVE-2025-67912 on NVD →

The Free Responsive Testimonials, Social Proof Reviews, and Customer Reviews – Stars Testimonials plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.3.3 via the 'stars-testimonials-with-slider-and-masonry-grid' shortcode. This makes it possible for authenticated attackers...

CVSS:

8.8

Affected:

up to 3.3.3

Fixed in:

3.3.4

Disclosed:

Dec 4, 2024

CVE-2024-11429 on NVD →

The Free Responsive Testimonials, Social Proof Reviews, and Customer Reviews – Stars Testimonials plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's stars_testimonials shortcode in all versions up to, and including, 3.3.1 due to insufficient input sanitization and output escaping on user...

CVSS:

6.4

Affected:

up to 3.3.1

Fixed in:

3.3.2

Disclosed:

Sep 30, 2024

CVE-2024-8989 on NVD →