CVE-2026-96532
HIGH
NVD
CVSS Score
7.5
Severity
HIGH
Published
Sep 26, 2026
Vendor
unknown
Description
The Testimonials Widget WordPress plugin through 4.0.4 does not perform a capability or ownership check when handling its front-end testimonial submission form, allowing unauthenticated users to modify or create arbitrary posts, including overwriting the title, content and author of any existing post.