Deserialization of Untrusted Data Vulnerability in WP Chill Strong Testimonials Plugin
CVE-2026-107436

8.8HIGH

Key Information:

Vendor

WordPress
Status
Strong Testimonials
Vendor
CVE Published:
18 October 2026

What is CVE-2026-107436?

The vulnerability in the WP Chill Strong Testimonials plugin involves the deserialization of untrusted data, which can lead to object injection attacks. This issue impacts versions from n/a up to 3.3.12, allowing an attacker to exploit data injection flaws that could compromise site security. It is essential for users to update to the latest versions and implement security best practices to mitigate this risk.

Affected Version(s)

Strong Testimonials 0 <= 3.3.12

References

https://patchstack.com/database/wordpress/plugin/strong-t...
vdb-entry

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Ayukiab | Patchstack Bug Bounty Program
.