Skip to content
PluginCanary

Strong Testimonials

by WP Chill · 80,000+ active installs · Checked 3 Nov 2026
Healthy

Healthy: maintained, last release 2 Nov 2026, 41 releases in 24 months, no unpatched vulnerabilities.

81/ 100 Canary Score
Sub-scores for Strong Testimonials
Ownership100
Maintenance100
Security60
Support70
Reputation70

How the score works

Quick answers

Is Strong Testimonials still maintained?
Yes. Last release 2 Nov 2026, 41 releases in the last 24 months. 2 Nov 2026 · wordpress.org
Who owns Strong Testimonials, and has it changed hands?
No change recorded. Main committer raldea89 since Mar 2022. 3 Nov 2026 · SVN log
Was Strong Testimonials removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
Is Strong Testimonials safe?
24 known vulnerabilities, all fixed (latest in 3.3.16). Not on the exploited list. 29 Oct 2026 · Wordfence Intelligence
Is the latest Strong Testimonials update safe to install?
No ownership change before 3.3.17. No one-star spike after it. 2 Nov 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
cdillon2721 May 2014 to 20 Jan 2019, 778 commits
machothemes20 Jan 2019 to 23 Mar 2020, 37 commits
giucu9116 Oct 2019 to 18 Jul 2022, 30 commits
wpchill5 Nov 2020 to 5 Nov 2025, 24 commits
raldea8921 Mar 2022 to 11 Nov 2024, 40 commits
altesin9 Jan 2025 to 2 Nov 2026, 39 commits

6 committers recorded. No ownership change since 2014.

Maintenance

Last release
2 days ago
Releases, 24 months
41
Tested up to
7.1 current
Requires PHP
5.6 supported 8.2+
Releases per quarter
Releases per quarter for Strong Testimonials
Q1 20241
Q2 20242
Q3 20247
Q4 20243
Q1 20255
Q2 20254
Q3 20255
Q4 20253
Q1 20263
Q2 20262
Q3 202611
Q4 20265

Last release 2 Nov 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: no reviews. Lifetime: 4.8.

Average rating per quarter for Strong Testimonials
Q3 20245.0
Q4 20244.9
Q1 20254.6
Q2 20255.0
Q3 20255.0
Q4 20254.5
Q1 20265.0
Q2 20264.0
Q3 20265.0

Average rating stayed at 5.0 between Q3 2024 and Q3 2026.

Rating distribution
5 star559
4 star25
3 star6
2 star8
1 star16

Security record

15 vulnerabilities in 24 months (24 on record), all patched (latest fixed in 3.3.16).

Show 24 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
29 Oct 2026Strong Testimonials <= 3.3.15 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 3.3.153.3.16Patched before disclosure
22 Oct 2026Strong Testimonials <= 3.3.14 - Missing Authorization4.3<= 3.3.143.3.15Patched before disclosure
19 Oct 2026Strong Testimonials <= 3.3.12 - Unauthenticated Stored Cross-Site Scripting7.2<= 3.3.123.3.13Patched before disclosure
16 Oct 2026Strong Testimonials <= 3.3.12 - Authenticated (Subscriber+) PHP Object Injection7.5<= 3.3.123.3.13Patched before disclosure
15 Oct 2026Strong Testimonials <= 3.3.12 - Missing Authorization4.3<= 3.3.123.3.13Patched before disclosure
15 Oct 2026Strong Testimonials <= 3.3.12 - Missing Authorization4.3<= 3.3.123.3.13Patched before disclosure
2 Oct 2026Strong Testimonials <= 3.3.11 - Unauthenticated Stored Cross-Site Scripting via 'platform_user_photo' Custom Field7.2<= 3.3.113.3.12Patched before disclosure
30 Sep 2026Strong Testimonials <= 3.3.11 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 3.3.113.3.12Patched before disclosure
17 Sep 2026Strong Testimonials <= 3.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'lightbox_class' Shortcode Attribute6.4<= 3.3.83.3.9Patched before disclosure
7 Apr 2026Strong Testimonials <= 3.2.21 - Authenticated (Contributor+) Stored Cross-Site Scripting via testimonial_view Shortcode6.4<= 3.2.213.2.22Patched before disclosure
29 Dec 2025Strong Testimonials <= 3.2.18 - Missing Authorization to Authenticated (Contributor+) Rating Meta Update4.3<= 3.2.183.2.19Patched before disclosure
28 Dec 2025Strong Testimonials <= 3.2.20 - Missing Authorization4.3<= 3.2.203.2.2119
5 Nov 2025Strong Testimonials <= 3.2.16 - Unauthenticated Arbitrary Shortcode Execution4.3<= 3.2.163.2.17Patched before disclosure
14 Jul 2025Strong Testimonials <= 3.2.11 - Authenticated (Author+) Stored Cross-Site Scripting via Custom Fields6.4<= 3.2.113.2.12Patched before disclosure
23 Feb 2025Strong Testimonials <= 3.2.3 - Missing Authorization5.3<= 3.2.33.2.4Patched before disclosure
30 Sep 2024Strong Testimonials <= 3.1.16 - Missing Authorization4.3<= 3.1.163.1.17Patched before disclosure
6 Jun 2024Strong Testimonials <= 3.1.12 - Authenticated(Contributor+) Improper Authorization to Views Modification4.3<= 3.1.123.1.13Patched before disclosure
3 Apr 2024Strong Testimonials <= 3.1.11 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 3.1.113.1.12Patched before disclosure
28 Dec 2023Strong Testimonials <= 3.1.10 - Cross-Site Request Forgery4.3<= 3.1.103.1.11Patched before disclosure
21 Feb 2023Strong Testimonials <= 3.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodes6.4<= 3.0.23.0.3Patched before disclosure
10 Jan 2023Strong Testimonials <= 3.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4<= 3.0.23.0.3Patched before disclosure
30 Jun 2021Strong Testimonials <= 2.51.2 - Authorization Bypass7.5<= 2.51.22.51.3Patched before disclosure
1 Feb 2020Strong Testimonials <= 2.40.0 - Stored Cross Site Scripting6.1<= 2.40.02.40.1Patched before disclosure
24 Jul 2018Strong Testimonials <= 2.31.4 - Reflected Cross-Site Scripting6.1<= 2.31.42.31.5133

Changelog mentions of security fixes: 3.3.13 (security); 3.3.15 (security); 3.3.16 (security).

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

100% of 2 support threads resolved in the last 2 months.

Momentum

80,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Strong Testimonials
4 May 20261,081
11 May 20262,368
18 May 202647,693
25 May 20267,817
1 Jun 20264,918
8 Jun 20263,558
15 Jun 20263,255
22 Jun 20262,774
29 Jun 202644,492
6 Jul 202650,150
13 Jul 20265,880
20 Jul 202646,129
27 Jul 202647,074
3 Aug 202689,321
10 Aug 20267,612
17 Aug 20264,468
24 Aug 20264,207
31 Aug 20263,899
7 Sep 202645,527
14 Sep 2026102,755
21 Sep 202690,360
28 Sep 20269,462
5 Oct 20269,066
12 Oct 202645,865
19 Oct 202686,118
26 Oct 202653,083
2 Nov 20267,217

Weekly downloads over the last 4 weeks are 57% above the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

Real TestimonialsScore 91 · 40,000+WP Tripadvisor Review WidgetsScore 91 · 20,000+TestimonialScore 91 · 20,000+Rich Showcase for Google ReviewsScore 90 · 100,000+Reviews FeedScore 90 · 100,000+

Facts

Version3.3.17
AuthorWP Chill
Added21 May 2014
Last updated2 Nov 2026
Active installs80,000+
Requires WordPress5.2
Tested up to7.1.4
Requires PHP5.6
CategoryCustomer Management > CRM & Customer Database
Tagsstar ratings, testimonial form, testimonial plugin, testimonials slider

Other plugins by this author: Modula Image Gallery - Photo Grid & Video Gallery, Download Monitor, Remove Footer Credit, Image Photo Gallery Final Tiles Grid, Passster - Password Protect Pages and Content, Kali Forms - Contact Form & Drag-and-Drop Builder, Htaccess File Editor - Easily Edit, Backup, Restore .htaccess file, CPO Content Types, Gallery PhotoBlocks, RSVP and Event Management, Qyrr - simply and modern QR-Code creation, Wider Admin Menu

Questions

Is Strong Testimonials still maintained?

Yes. Last release 2 Nov 2026, 41 releases in the last 24 months.

Who owns Strong Testimonials, and has it changed hands?

No change recorded. Main committer raldea89 since Mar 2022.

Was Strong Testimonials removed from wordpress.org?

No. Listed on wordpress.org as of 3 Nov 2026.

Is Strong Testimonials safe?

24 known vulnerabilities, all fixed (latest in 3.3.16). Not on the exploited list.

Is the latest Strong Testimonials update safe to install?

No ownership change before 3.3.17. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 3 Nov 2026.Report a data issue