Strong Testimonials

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 50% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price.

Recent releases and news for this plugin

1. — Version 3.3.3 Added: New default Display and Form templates that inherit the active theme’s styles. Fixed: Scoped global .disabled CSS rule. 3.3.3
2. — Version 3.3.2 Added: Admin notice if the used tempalte is no longer valid. Added: Upsell for the Video extension. 3.3.2
3. — Version 3.3.1 Fixed: Multiple undefined array key PHP warnings. Fixed: Wrong product name in REST API error response. Fixed: CPT and taxonomy rewrite slugs should not be translatable. = 3.3.0 – 21.05.2026 – – Added: Support for extens 3.3.1
4. — Version 3.3.4 Fixed: Extensions REST endpoint being cached by page caching plugins, causing stale extension states. Fixed: Single template content could leak into other areas of the page that also run the the_content filter. 3.3.4
5. — Version 3.3.5 Fixed: “Enable comments for testimonials” setting not working. Fixed: Saving Properties settings could reset other tabs. 3.3.5
6. — Version 3.3.6 Fixed: Masonry column widths could be overridden by the template’s default CSS. Fixed: Star rating icons could be invisible when rendered without inline SVG support. 3.3.6

15 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. Medium · 6.4 Strong Testimonials <= 3.2.21 - Authenticated (Contributor+) Stored Cross-Site Scripting via testimonial_view Shortcode ↗
   2026-04-07 CVE-2026-3239 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.2.21 Patched in 3.2.22
2. Medium · 4.3 Strong Testimonials <= 3.2.18 - Missing Authorization to Authenticated (Contributor+) Rating Meta Update ↗
   2025-12-29 CVE-2025-14426 Missing Authorization Affects <= 3.2.18 Patched in 3.2.19
3. Medium · 4.3 Strong Testimonials <= 3.2.20 - Missing Authorization ↗
   2025-12-28 CVE-2026-24957 Missing Authorization Affects <= 3.2.20 Patched in 3.2.21
4. Medium · 4.3 Strong Testimonials <= 3.2.16 - Unauthenticated Arbitrary Shortcode Execution ↗
   2025-11-05 CVE-2025-11268 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.2.16 Patched in 3.2.17
5. Medium · 6.4 Strong Testimonials <= 3.2.11 - Authenticated (Author+) Stored Cross-Site Scripting via Custom Fields ↗
   2025-07-14 CVE-2025-7367 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.2.11 Patched in 3.2.12
6. Medium · 5.3 Strong Testimonials <= 3.2.3 - Missing Authorization ↗
   2025-02-23 CVE-2025-26975 Missing Authorization Affects <= 3.2.3 Patched in 3.2.4
7. Medium · 4.3 Strong Testimonials <= 3.1.16 - Missing Authorization ↗
   2024-09-30 CVE-2024-47362 Missing Authorization Affects <= 3.1.16 Patched in 3.1.17
8. Medium · 4.3 Strong Testimonials <= 3.1.12 - Authenticated(Contributor+) Improper Authorization to Views Modification ↗
   2024-06-06 CVE-2023-6491 Improper Access Control Affects <= 3.1.12 Patched in 3.1.13
9. Medium · 6.4 Strong Testimonials <= 3.1.11 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
   2024-04-03 CVE-2024-3261 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.1.11 Patched in 3.1.12
10. Medium · 4.3 Strong Testimonials <= 3.1.10 - Cross-Site Request Forgery ↗
    2023-12-28 CVE-2023-52123 Cross-Site Request Forgery (CSRF) Affects <= 3.1.10 Patched in 3.1.11
11. Medium · 6.4 Strong Testimonials <= 3.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodes ↗
    2023-02-21 CVE-2023-26013 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.0.2 Patched in 3.0.3
12. Medium · 6.4 Strong Testimonials <= 3.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode ↗
    2023-01-10 CVE-2022-4717 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.0.2 Patched in 3.0.3
13. High · 7.5 Strong Testimonials <= 2.51.2 - Authorization Bypass ↗
    2021-06-30 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.51.2 Patched in 2.51.3
14. Medium · 6.1 Strong Testimonials <= 2.40.0 - Stored Cross Site Scripting ↗
    2020-02-01 CVE-2020-8549 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.40.0 Patched in 2.40.1
15. Medium · 6.1 Strong Testimonials <= 2.31.4 - Reflected Cross-Site Scripting ↗
    2018-07-24 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.31.4 Patched in 2.31.5

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0

Translated into 129 languages, 3 at 90% or more

Plus 105 more locales with partial translations.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2025-10-30 100K+ → 90K+ down

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• kk Star Ratings – Rate Post & Collect User Feedbacks 70K+ installs · 3.9★ · 1 shared tag B
• Testimonial – Testimonial Slider and Showcase Plugin 20K+ installs · 4.5★ · 1 shared tag A
• Review & testimonial widgets 1K+ installs · 3.8★ · 1 shared tag D
• TC Testimonials 300+ installs · 4.0★ · 1 shared tag C
• Super Testimonials 200+ installs · 4.0★ · 1 shared tag B
• Elfsight Testimonials Slider 200+ installs · 3.6★ · 1 shared tag C

Embed this report card

Drop a live Pulse card for Strong Testimonials into a readme, a review or a deck. It updates itself.

Strong Testimonials: 90K+ active installs, 4.8★ (614 reviews). Plugin Pulse (WP Mayor), as of 2026-08-25. https://plugins.wpmayor.com/plugin/strong-testimonials