Unknown Testimonials Widget

2 known vulnerabilities in Unknown Testimonials Widget, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

CVE-2026-96533 CVSS 5.8 medium The Testimonials Widget WordPress plugin through 4.0.4 does not validate a user-supplied URL before fetching it server-side and storing…
CVE-2026-96532 CVSS 7.5 high The Testimonials Widget WordPress plugin through 4.0.4 does not perform a capability or ownership check when handling its front-end…