Solid Testimonials
Avoid: vulnerability published 30 Oct 2026 with no patched version yet.
Capped at 39: a vulnerability has no patch.
| Ownership | 100 |
|---|---|
| Maintenance | 100 |
| Security | 5 |
| Support | 70 |
| Reputation | 70 |
Quick answers
- Is Solid Testimonials still maintained?
- Yes. Last release 3 Nov 2026, 12 releases in the last 24 months. 3 Nov 2026 · wordpress.org
- Who owns Solid Testimonials, and has it changed hands?
- No change recorded. Main committer samdani since Jan 2015. 3 Nov 2026 · SVN log
- Was Solid Testimonials removed from wordpress.org?
- No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
- Is Solid Testimonials safe?
- No. 1 known vulnerability has no fix in the current version. 30 Oct 2026 · Wordfence Intelligence
- Is the latest Solid Testimonials update safe to install?
- No ownership change before 3.3.10. No one-star spike after it. 29 Mar 2026 · Release history
Active signals
Facts we detected, with links to the source.
- CriticalSEC-1Vulnerability published 30 Oct 2026 with no patched version yet. Disable or replace the plugin until a fix is released.30 Oct 2026Evidence
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| samdani | 15 Jan 2015 to 3 Nov 2026, 219 commits |
|---|
1 committer recorded. No ownership change since 2015.
Maintenance
- Last release
- yesterday
- Releases, 24 months
- 12
- Tested up to
- 7.1 current
- Requires PHP
- 7.4 supported 8.2+
| Q1 2024 | 0 |
|---|---|
| Q2 2024 | 5 |
| Q3 2024 | 22 |
| Q4 2024 | 1 |
| Q1 2025 | 1 |
| Q2 2025 | 2 |
| Q3 2025 | 0 |
| Q4 2025 | 1 |
| Q1 2026 | 8 |
| Q2 2026 | 0 |
| Q3 2026 | 0 |
| Q4 2026 | 0 |
Last release 3 Nov 2026. Tested with WordPress 7.1 (current).
Reputation
Last 90 days: no reviews. Lifetime: 4.3.
| 5 star | 27 |
|---|---|
| 4 star | 1 |
| 3 star | 1 |
| 2 star | 2 |
| 1 star | 4 |
Security record
4 vulnerabilities in 24 months (9 on record), 1 with no fix in the current version.
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 30 Oct 2026 | Solid Testimonials - Testimonial Slider, Video Testimonials & Customer Reviews <= 3.3.10 - Authenticated (Contributor+) PHP Object Injection | 7.5 | <= 3.3.10 | No fix | n/a |
Show 8 patched vulnerabilities
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 30 Apr 2026 | Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter | 6.1 | <= 3.2.8 | 3.2.9 | Patched before disclosure |
| 7 May 2025 | GS Testimonial Slider <= 3.2.9 - Unauthenticated Arbitrary Shortcode Execution | 6.5 | <= 3.2.9 | 3.3.0 | Patched before disclosure |
| 7 May 2025 | GS Testimonial Slider <= 3.3.0 - Missing Authorization | 4.3 | <= 3.3.0 | 3.3.1 | Patched before disclosure |
| 28 Mar 2024 | GS Testimonial Slider <= 3.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting | 6.4 | <= 3.1.4 | 3.1.5 | 126 |
| 16 Dec 2022 | Appsero <= 1.2.1 - Missing Authorization | 4.3 | <= 1.9.7 | 1.9.8 | 594 |
| 14 Dec 2022 | Appsero <= 1.2.0 - Cross-Site Request Forgery | 4.3 | <= 1.9.7 | 1.9.8 | 596 |
| 15 Sep 2022 | GS Testimonial Slider <= 1.9.6 - Authenticated (Contributor+) Stored Cross-Site Scripting | 6.4 | <= 1.9.6 | 1.9.7 | 686 |
| 27 Jul 2022 | GS Testimonial Slider <= 1.9.6 - Authenticated (Author+) Stored Cross-Site Scripting | 6.4 | <= 1.9.6 | 1.9.7 | 736 |
Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.
Support
Support history appears after our first snapshots of the forum counts.
Momentum
1,000+ active installs. History builds with each weekly snapshot.
| 4 May 2026 | 62 |
|---|---|
| 11 May 2026 | 144 |
| 18 May 2026 | 170 |
| 25 May 2026 | 104 |
| 1 Jun 2026 | 141 |
| 8 Jun 2026 | 115 |
| 15 Jun 2026 | 81 |
| 22 Jun 2026 | 82 |
| 29 Jun 2026 | 89 |
| 6 Jul 2026 | 93 |
| 13 Jul 2026 | 101 |
| 20 Jul 2026 | 87 |
| 27 Jul 2026 | 131 |
| 3 Aug 2026 | 370 |
| 10 Aug 2026 | 210 |
| 17 Aug 2026 | 114 |
| 24 Aug 2026 | 128 |
| 31 Aug 2026 | 126 |
| 7 Sep 2026 | 135 |
| 14 Sep 2026 | 121 |
| 21 Sep 2026 | 116 |
| 28 Sep 2026 | 141 |
| 5 Oct 2026 | 117 |
| 12 Oct 2026 | 138 |
| 19 Oct 2026 | 196 |
| 26 Oct 2026 | 262 |
| 2 Nov 2026 | 26 |
Weekly downloads over the last 4 weeks are 17% above the 27-week average.
Healthier alternatives
Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.
Facts
| Version | 3.3.10 |
|---|---|
| Author | GS Plugins |
| Added | 15 Jan 2015 |
| Last updated | 3 Nov 2026 |
| Active installs | 1,000+ |
| Requires WordPress | 6.0 |
| Tested up to | 7.1.4 |
| Requires PHP | 7.4 |
| Category | E-commerce & Shopping |
| Tags | social proof, testimonials, customer reviews, testimonial slider, testimonial showcase |
Other plugins by this author: Logo Slider - Logo Carousel, Logo Showcase, Logo Gallery & Client Logos, Team Members - Team Showcase, Team Slider, Grid, Table & Staff Directory, GS Pinterest Portfolio - Pinterest Feed, Pinterest Board & Pin Widgets, GS Books Showcase - Book Library, Book Grid & Book Slider for Authors, GS Portfolio - Filterable Portfolio, Portfolio Grid & Portfolio Slider, GS Product Slider for WooCommerce - Product Carousel, Product Grid & Product Showcase, Project Showcase - Case Studies, Project Portfolio & Project Grid, GS YouTube Gallery - YouTube Channel, Playlist & Video Gallery, GS Posts Grid - Post Grid, Recent Posts, Category Posts & Post Slider, PowerUp - Admin Tools (Login/Logout Redirects, Scripts & Comments Control), GS Brands for WooCommerce - Product Brands, Brand Logos & Brand Slider, GS Variation Swatches for WooCommerce
Questions
Is Solid Testimonials still maintained?
Yes. Last release 3 Nov 2026, 12 releases in the last 24 months.
Who owns Solid Testimonials, and has it changed hands?
No change recorded. Main committer samdani since Jan 2015.
Was Solid Testimonials removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026.
Is Solid Testimonials safe?
No. 1 known vulnerability has no fix in the current version.
Is the latest Solid Testimonials update safe to install?
No ownership change before 3.3.10. No one-star spike after it.