Approved changes feed: RSS · Atom

cpe:2.3:a:atarim:visual_collaboration:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

VendorAtarim (2d0b62e3-3d9d-5c17-9e67-a623123e1dde)
ProductVisual Collaboration (a3880492-3796-58bc-959f-88631e9fc282)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-2793 vulnerable 2026-06-08 06:35:27.366560 Visual Website Collaboration, Feedback & Project Management – Atarim <= 3.30 - Unauthenticated Stored Cross-Site Scripting
HIGH (7.2)
The Visual Website Collaboration, Feedback & Project Management – Atarim plugin for WordPress is vulnerable to Stored Cross-Site Scripting via comments in all versions up to, and including, 3.30 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Published: 2024-05-31T04:31:43.112Z
Updated: 2026-04-08T17:11:20.505Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2038 vulnerable 2026-06-08 06:33:30.184424 Visual Website Collaboration, Feedback & Project Management – Atarim <= 3.22.6 - Hardcoded Credentials
HIGH (7.5)
The Visual Website Collaboration, Feedback & Project Management – Atarim plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 3.22.6. This is due to the use of hardcoded credentials to authenticate all the incoming API requests. This makes it possible for unauthenticated attackers to modify plugin settings, delete posts, modify post titles, and upload images.
Published: 2024-05-23T06:46:02.833Z
Updated: 2026-04-08T16:43:18.520Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-47544 vulnerable 2026-06-08 06:14:24.945753 WordPress Atarim Plugin <= 3.12 is vulnerable to Cross Site Scripting (XSS)
HIGH (7.1)
Unauth. Stored Cross-Site Scripting (XSS) vulnerability in Atarim Visual Website Collaboration, Feedback & Project Management – Atarim plugin <= 3.12 versions.
Published: 2023-11-14T21:01:23.100Z
Updated: 2026-04-28T16:08:49.811Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.