Missing Authorization Vulnerability in Strong Testimonials by WordPress
CVE-2026-109897

5.4MEDIUM

Key Information:

Vendor

WordPress
Status
Strong Testimonials
Vendor
CVE Published:
15 October 2026

What is CVE-2026-109897?

The Strong Testimonials plugin for WordPress is susceptible to a missing authorization vulnerability that allows attackers to exploit incorrectly configured access control security levels. This issue affects all versions from not applicable through 3.3.12, potentially granting unauthorized access to sensitive areas of the site. Site administrators should take immediate action to rectify access control settings to enhance their security posture.

Affected Version(s)

Strong Testimonials 0 <= 3.3.12

References

https://patchstack.com/database/wordpress/plugin/strong-t...
vdb-entry

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

GOOK_BOB | Patchstack Bug Bounty Program
.