Atarim – Visual Feedback, Review & Ai Collaboration
Approved changes feed: RSS · Atom
cpe:2.3:a:wpfeedback:atarim_–_visual_feedback,_review_&_ai_collaboration:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Wpfeedback (a1d9810c-1bc4-5f96-a381-b9e1e2162e0b) |
|---|---|
| Product | Atarim – Visual Feedback, Review & Ai Collaboration (0905ac93-0845-5d91-8467-5ac5d341ffc2) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-7621 |
vulnerable | 2026-06-08 06:58:22.873524 |
Visual Website Collaboration, Feedback & Project Management – Atarim <= 4.0.2 - Missing Authorization to Authenticated (Subscriber+) Settings Update
MEDIUM (5.4)
The Visual Website Collaboration, Feedback & Project Management – Atarim plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the process_wpfeedback_misc_options() function in all versions up to, and including, 4.0.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update the plugins settings which can also be leveraged to gain access to the plugin's settings.
Published: 2024-08-10T02:01:21.796Z
Updated: 2026-04-08T17:03:17.912Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2793 |
vulnerable | 2026-06-08 06:35:27.367748 |
Visual Website Collaboration, Feedback & Project Management – Atarim <= 3.30 - Unauthenticated Stored Cross-Site Scripting
HIGH (7.2)
The Visual Website Collaboration, Feedback & Project Management – Atarim plugin for WordPress is vulnerable to Stored Cross-Site Scripting via comments in all versions up to, and including, 3.30 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Published: 2024-05-31T04:31:43.112Z
Updated: 2026-04-08T17:11:20.505Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2038 |
vulnerable | 2026-06-08 06:33:30.185220 |
Visual Website Collaboration, Feedback & Project Management – Atarim <= 3.22.6 - Hardcoded Credentials
HIGH (7.5)
The Visual Website Collaboration, Feedback & Project Management – Atarim plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 3.22.6. This is due to the use of hardcoded credentials to authenticate all the incoming API requests. This makes it possible for unauthenticated attackers to modify plugin settings, delete posts, modify post titles, and upload images.
Published: 2024-05-23T06:46:02.833Z
Updated: 2026-04-08T16:43:18.520Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-12104 |
vulnerable | 2026-06-08 06:23:51.268774 |
Visual Website Collaboration, Feedback & Project Management – Atarim <= 4.0.9 - Missing Authorization to Authenticated (Subscriber+) Project Page/File Deletion
MEDIUM (5.3)
The Visual Website Collaboration, Feedback & Project Management – Atarim plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the wpf_delete_file and wpf_delete_file functions in all versions up to, and including, 4.0.9. This makes it possible for unauthenticated attackers to delete project pages and files. CVE-2025-22657 may be a duplicate of this issue.
Published: 2025-01-21T09:21:10.182Z
Updated: 2026-04-08T17:02:52.796Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.