The Easy Testimonials plugin for WordPress is not secure in versions up to 1.36.1. This means that people with certain user levels can inject scripts into pages which will run when someone accesses the page. This is a serious security risk and should be addressed as soon as possible.