Unrated severityNVD Advisory· Published Sep 26, 2026
CVE-2026-96532
CVE-2026-96532
Description
The Testimonials Widget WordPress plugin through 4.0.4 does not perform a capability or ownership check when handling its front-end testimonial submission form, allowing unauthenticated users to modify or create arbitrary posts, including overwriting the title, content and author of any existing post.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2<=4.0.4+ 1 more
- (no CPE)range: <=4.0.4
- (no CPE)range: <=4.0.4
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.