CVE-2023-6491: Wpchill Strong Testimonials

Medium severity, CVSS 4.3. EPSS: 0.3% chance of exploitation in the next 30 days.

The Strong Testimonials plugin for WordPress is vulnerable to unauthorized modification of data due to an improper capability check on the wpmtst_save_view_sticky function in all versions up to, and including, 3.1.12. This makes it possible for authenticated attackers, with contributor access and above, to modify favorite views.

Affected products

• Wpchill Strong Testimonials: before 3.1.13 (fixed in 3.1.13)

Published 2024-06-07. Last modified 2026-06-17.