Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The Strong Testimonials plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's testimonial_view shortcode in all versions up to, and including, 3.2.21 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-04-08 | 2 | Disclosure2 |
| 2026-04-13 | 1 | Disclosure1 |
CVE-2026-3239 The Strong Testimonials plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's testimonial_view shortcode in all versions up to, and includi… https://www.cve.org/CVERecord?id=CVE-2026-3239
Post summary
The CVE-2026-3239 vulnerability is a stored XSS flaw in the Strong Testimonials WordPress plugin’s testimonial_view shortcode, as reported in the CVE record.
CVE-2026-3239 Stored Cross-Site Scripting in Strong Testimonials WordPress Plugin Up to 3.2.21 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-3239
Post summary
The post announces CVE-2026-3239, a stored XSS flaw in the Strong Testimonials WordPress plugin (v≤3.2.21), and links to vulnerability details, but provides no PoC, exploitation evidence, or patch information.
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-3239 - Strong Testimonials <= 3.2.21 - Authenticated (Contributor+) Stored Cross-Site Scripting via testimonial_view Shortcode Intel Report: https://ift.tt/P6bU1Js
Post summary
The message discloses a new CVE (CVE-2026-3239) affecting versions ≤3.2.21, highlighting an authenticated stored XSS vulnerability via the testimonial_view shortcode, but no PoC, exploit code, active exploitation or patch is provided.