CVE WATCH / VULNERABILITY DETAIL
CVE-2026-89269
MEDIUMCVSS 6.8NVD feed
Published 13 October 2026 · tracked since 14 October 2026
Description
The WP Testimonials WordPress plugin through 1.4.13 does not properly escape testimonial content and reverses WordPress's HTML sanitization when rendering it, allowing users with the Author role and above to store JavaScript that executes in the session of any user viewing the testimonials, includin
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-109190 MEDIUM 6.3
- CVE-2026-72895 HIGH 7.7
- CVE-2026-78556 HIGH 7.4
- CVE-2026-78557 HIGH 8.3
- CVE-2026-109114 HIGH 7.3
- CVE-2026-109115 HIGH 7.3
- CVE-2026-109116 HIGH 7.3
- CVE-2026-108179 HIGH 7.6
- CVE-2026-101020 HIGH 7.8
- CVE-2026-102562 HIGH 7.2