Approved changes feed: RSS · Atom

cpe:2.3:a:atarim:atarim:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

VendorAtarim (2d0b62e3-3d9d-5c17-9e67-a623123e1dde)
ProductAtarim (0f39c949-7a69-5cdb-9044-53fdf1d2f7ce)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-37434 vulnerable 2026-06-08 06:39:47.565088 WordPress Atarim plugin <= 3.31 - Authenticated Cross Site Scripting (XSS) vulnerability
MEDIUM (5.9)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Vito Peleg Atarim atarim-visual-collaboration.This issue affects Atarim: from n/a through <= 3.31.
Published: 2024-07-22T08:18:00.277Z
Updated: 2026-04-28T16:09:58.910Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-12104 vulnerable 2026-06-08 06:23:51.269517 Visual Website Collaboration, Feedback & Project Management – Atarim <= 4.0.9 - Missing Authorization to Authenticated (Subscriber+) Project Page/File Deletion
MEDIUM (5.3)
The Visual Website Collaboration, Feedback & Project Management – Atarim plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the wpf_delete_file and wpf_delete_file functions in all versions up to, and including, 4.0.9. This makes it possible for unauthenticated attackers to delete project pages and files. CVE-2025-22657 may be a duplicate of this issue.
Published: 2025-01-21T09:21:10.182Z
Updated: 2026-04-08T17:02:52.796Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-47544 vulnerable 2026-06-08 06:14:24.946597 WordPress Atarim Plugin <= 3.12 is vulnerable to Cross Site Scripting (XSS)
HIGH (7.1)
Unauth. Stored Cross-Site Scripting (XSS) vulnerability in Atarim Visual Website Collaboration, Feedback & Project Management – Atarim plugin <= 3.12 versions.
Published: 2023-11-14T21:01:23.100Z
Updated: 2026-04-28T16:08:49.811Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37393 vulnerable 2026-06-08 06:08:15.226665 WordPress Atarim Plugin <= 3.9.3 is vulnerable to Cross Site Scripting (XSS)
HIGH (7.1)
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Atarim Visual Website Collaboration, Feedback & Project Management – Atarim plugin <= 3.9.3 versions.
Published: 2023-09-04T10:21:00.298Z
Updated: 2026-04-28T16:08:32.098Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.