We often find that vulnerabilities haven’t been fully resolved when the WPScan Vulnerability Database claims they have. That is the case with the plugin Strong Testimonials, where they previously listed that some of the plugin’s AJAX accessible functionality was not properly secured.

…

[Read more]