Known vulnerabilities in Real Testimonials – Testimonial Slider, Collect Customer Reviews and Video Testimonials

A Customizable Testimonial plugin to Automate Collecting, Filtering, and Publishing Customer Reviews. Testimonial Slider, Grid & More to Grow Sales

3Reported vulnerabilities

6.6Highest CVSS score

3.1.16Latest version

40,000+Active installs

What to do now

Update Real Testimonials – Testimonial Slider, Collect Customer Reviews and Video Testimonials to 3.1.16 or later. 3 of these have a fixed version available. Updating resolves them.

Plugin last updated: July 7, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVE	Severity	Exploit probability next 30 days	Affected versions	Fixed in	Published
CVE-2026-59521	Medium 6.6	0.5%	3.1.15 and earlier	`3.1.16`	July 7, 2026
CVE-2025-22269	Medium 6.4	0.3%	3.1.6 and earlier	`3.1.7`	April 11, 2025
WF-23f1b1da-2ac0-49c1-bb32-2fe2cfd56192	Medium 6.4	—	2.1.6 and earlier	`2.2`	February 20, 2020

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.