SZB-8adfecdaeb
CVE-2026-78527 disclosed in GS Testimonial Slider WordPress plugin
- Status
- Unverified: only social posts report this so far
- Kind
- Vulnerability
- Vendor
- GS Testimonial Slider
- Product
- GS Testimonial Slider
- First seen
Summary
CVE-2026-78527 is a PHP object injection vulnerability, rated High (8.8), in GS Testimonial Slider versions up to and including 3.3.10 as reported by TheHackerWire. The flaw is reportedly exploitable by a contributor-level user.
If you use GS Testimonial Slider
Check whether GS Testimonial Slider is installed and at version 3.3.10 or earlier
Update to a patched release from the plugin vendor once available
Restrict contributor-level accounts on affected sites until patched
What the sources say 1
· Mastodon: “🟠 CVE-2026-78527 - High (8.8) Contributor PHP Object Injection in GS Testimonial Slider <= 3.3.10 versions.” Source