CVE-2025-23560

WordPress Web Testimonials plugin <= 1.2 - CSRF to Stored XSS vulnerability

Published Jan 16, 2025 CVSS 3.1 · 7.1 High EPSS < 1% KEV · Not listed

Description

Cross-Site Request Forgery (CSRF) vulnerability in plumwd Web Testimonials web-testimonials allows Stored XSS.This issue affects Web Testimonials: from n/a through <= 1.2.

Analysis

Technical impact

A Cross‑Site Request Forgery flaw in the Web Testimonials plugin allows an attacker to forge an authorized request that inserts arbitrary JavaScript into testimonial content. The injected code is stored and will run in the browsers of any user who views the impacted testimonial. This Stored XSS can steal session cookies, deface pages, or redirect users to malicious sites.

Affected Systems

The vulnerability affects the WordPress Web Testimonials plugin from unknown initial releases through version 1.2. Any WordPress site that has the plugin installed at or below this version is impacted.

Risk and Exploitability

The CVSS score of 7.1 indicates a high severity exploit. The EPSS score is below 1 %, so active exploitation is currently rare. The vulnerability is not listed in CISA KEV. Attackers can likely exploit it by crafting a CSRF payload either via a link or form, requiring the target to be authenticated admin or a logged‑in user. No specific network requirement is stated, but the exploit requires the victim to have the plugin installed and active.

Affected Products

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

plumwd

Web Testimonials

unaffected

Version	Status	Constraints
`0`	affected	≤ 1.2

No data.

Vendor	Product	Versions
Wordpress	Wordpress	—

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

Upgrade WordPress Web Testimonials to any version higher than 1.2 to remove the CVE‑affected code.
If an upgrade is not immediately possible, install a CSRF protection layer by adding WordPress nonces or referer checks to all forms that modify testimonial content.
Disable or uninstall the Web Testimonials plugin until a patched version is available.
After applying a fix, perform a scan of testimonial content for hidden scripts and remove any suspicious entries.

Generated by OpenCVE AI on May 1, 2026 at 21:10 UTC.

Tracking

Advisories

Source	ID	Title
EUVD	EUVD-2025-3248	Cross-Site Request Forgery (CSRF) vulnerability in Elke Hinze, Plumeria Web Design Web Testimonials allows Stored XSS.This issue affects Web Testimonials: from n/a through 1.2.

Metrics

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Changed

Confidentiality Impact Low

Integrity Impact Low

Availability Impact Low

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploit prediction score: < 1% (0.211% probability within 30 days)

Exploitation none

Automatable no

Technical Impact partial

References

Link	Providers
https://patchstack.com/database/Wordpress/Plugin/web-testimonials/vulnerability/wordpress-web-testimonials-plugin-1-2-csrf-to-stored-xss-vulnerability?_s_id=cve

History

Apr 23, 2026 3:00 PM Scoring metrics updated View changes

Type	Values Removed	Values Added
Metrics		cvssV3_1 `{'score': 7.1, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L'}`

Apr 1, 2026 11:45 PM Description updated. References updated. Scoring metrics updated View changes

Type	Values Removed	Values Added
Description	Cross-Site Request Forgery (CSRF) vulnerability in Elke Hinze, Plumeria Web Design Web Testimonials allows Stored XSS.This issue affects Web Testimonials: from n/a through 1.2.	Cross-Site Request Forgery (CSRF) vulnerability in plumwd Web Testimonials web-testimonials allows Stored XSS.This issue affects Web Testimonials: from n/a through <= 1.2.
References	https://patchstack.com/database/wordpress/plugin/web-testimonials/vulnerability/wordpress-web-testimonials-plugin-1-2-csrf-to-stored-xss-vulnerability?_s_id=cve	https://patchstack.com/database/Wordpress/Plugin/web-testimonials/vulnerability/wordpress-web-testimonials-plugin-1-2-csrf-to-stored-xss-vulnerability?_s_id=cve
Metrics	cvssV3_1 `{'score': 7.1, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L'}`

Jan 17, 2025 8:15 PM Scoring metrics updated View changes

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Jan 16, 2025 8:15 PM Description updated. Title updated. Weaknesses updated. Added references. Scoring metrics updated View changes

Type	Values Removed	Values Added
Description		Cross-Site Request Forgery (CSRF) vulnerability in Elke Hinze, Plumeria Web Design Web Testimonials allows Stored XSS.This issue affects Web Testimonials: from n/a through 1.2.
Title		WordPress Web Testimonials plugin <= 1.2 - CSRF to Stored XSS vulnerability
Weaknesses		CWE-352
References		https://patchstack.com/database/wordpress/plugin/web-testimonials/vulnerability/wordpress-web-testimonials-plugin-1-2-csrf-to-stored-xss-vulnerability?_s_id=cve
Metrics		cvssV3_1 `{'score': 7.1, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L'}`