Testimonials Slider Plugin Security & Risk Analysis

wordpress.org/plugins/simple-testimonial-slider-and-grid

Testimonial slider plugin used to add custom post type field where you can add custom post type title, content, feature image and Testimonial author.

0 active installs v1.0.1 PHP 5.2.4+ WP 4.9.4+ Updated Apr 4, 2018
grid-viewslider-widgettestimonial-slider-plugin
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Testimonials Slider Plugin Safe to Use in 2026?

Generally Safe

Score 85/100

Testimonials Slider Plugin has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 8yr ago
Risk Assessment

The "simple-testimonial-slider-and-grid" plugin version 1.0.1 demonstrates a mixed security posture. On the positive side, it shows excellent practices regarding SQL injection by exclusively using prepared statements and having no recorded vulnerabilities, including critical or high ones. The absence of file operations, external HTTP requests, and dangerous functions further bolsters its security. However, significant concerns arise from the lack of proper output escaping, with only 33% of outputs being properly escaped. This indicates a substantial risk of Cross-Site Scripting (XSS) vulnerabilities, where malicious scripts could be injected into the website and executed by users. Furthermore, the complete absence of nonce checks and capability checks on its sole shortcode entry point is a critical oversight. This means that any user, regardless of their role or permissions, could potentially trigger the functionality associated with this shortcode, opening the door for unauthorized actions or data manipulation if the shortcode's execution path is not adequately secured internally.

Key Concerns

  • Insufficient output escaping (33% properly escaped)
  • Missing nonce check on shortcode
  • Missing capability check on shortcode
Vulnerabilities
None known

Testimonials Slider Plugin Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 17, 2026

Testimonials Slider Plugin Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
10
5 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

33% escaped15 total outputs
Attack Surface

Testimonials Slider Plugin Attack Surface

Entry Points1
Unprotected0

Shortcodes 1

[testimonial_list] testimonial-slider.php:138
WordPress Hooks 8
actioninittestimonial-slider.php:32
actionadmin_inittestimonial-slider.php:34
actionsave_posttestimonial-slider.php:60
actionwp_enqueue_scriptstestimonial-slider.php:147
actionwp_enqueue_scriptstestimonial-slider.php:159
actionwp_enqueue_scriptstestimonial-slider.php:167
actionwp_enqueue_scriptstestimonial-slider.php:258
actionwidgets_inittestimonial-slider.php:276
Maintenance & Trust

Testimonials Slider Plugin Maintenance & Trust

Maintenance Signals

WordPress version tested4.9.29
Last updatedApr 4, 2018
PHP min version5.2.4
Downloads1K

Community Trust

Rating0/100
Number of ratings0
Active installs0
Developer Profile

Testimonials Slider Plugin Developer Profile

Navin Kumar

1 plugin · 0 total installs

84
trust score
Avg Security Score
85/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Testimonials Slider Plugin

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/simple-testimonial-slider-and-grid/bootstrap/css/bootstrap.css/wp-content/plugins/simple-testimonial-slider-and-grid/bootstrap/js/bootstrap.min.js/wp-content/plugins/simple-testimonial-slider-and-grid/js/slick/slick/slick-theme.css/wp-content/plugins/simple-testimonial-slider-and-grid/js/slick/slick/slick.js/wp-content/plugins/simple-testimonial-slider-and-grid/css/custom.js/wp-content/plugins/simple-testimonial-slider-and-grid/custom-css.css
Script Paths
/wp-content/plugins/simple-testimonial-slider-and-grid/bootstrap/js/bootstrap.min.js/wp-content/plugins/simple-testimonial-slider-and-grid/js/slick/slick/slick.js/wp-content/plugins/simple-testimonial-slider-and-grid/css/custom.js

HTML / DOM Fingerprints

CSS Classes
testimonial_listtestimonial-slidertestimonial-gridslider-layouttestimonial-contenttestimonial-description
HTML Comments
testtest 2Our custom post type functionCPT Options+12 more
Data Attributes
name="testimonial_review_author_name"testimonial_directortestimonial_listtestimonial-slidertestimonial-gridslider-layout+5 more
Shortcode Output
<div class="testimonial_list testimonial-slider slider-layout"><div class="testimonial_list testimonial-grid testimonial-grid"><div class="col-md-4"><div class="testimonial-content">
FAQ

Frequently Asked Questions about Testimonials Slider Plugin