Feedback Modal For Website
Approved changes feed: RSS · Atom
cpe:2.3:a:nedwp:feedback_modal_for_website:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Nedwp (b17a5d0d-c7e3-5e50-81ee-12dbd43ddd03) |
|---|---|
| Product | Feedback Modal For Website (07b06370-167a-5a58-9653-4c7d820532f8) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-13528 |
vulnerable | 2026-06-08 07:04:32.453110 |
Feedback Modal for Website <= 1.0.1 - Missing Authorization to Unauthenticated Arbitrary Feedback Data Exfiltration via 'export_data' Parameter
MEDIUM (5.3)
The Feedback Modal for Website plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'handle_export' function in all versions up to, and including, 1.0.1. This makes it possible for unauthenticated attackers to export all feedback data in CSV or JSON format via the 'export_data' parameter.
Published: 2025-12-05T05:31:29.864Z
Updated: 2026-04-08T17:32:47.536Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.