EUVD-2026-66948
GHSA-8v76-8w5q-62c6
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Network-accessible unauthenticated endpoint exposes data with no integrity or availability impact; AC:L as no special preconditions beyond plugin activation.
Primary rating from Vendor (Patchstack).
CVSS VectorVendor: Patchstack
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Lifecycle Timeline
2DescriptionCVE.org
Subscriber Sensitive Data Exposure in SureFeedback Client Site <= 1.2.12 versions.
AnalysisAI
Unauthenticated sensitive data exposure in the SureFeedback Client Site WordPress plugin (≤1.2.12) permits remote attackers to retrieve subscriber-level confidential data without any credentials. The root cause is CWE-862 (Missing Authorization), meaning the plugin exposes data endpoints that fail to enforce access control checks before returning sensitive subscriber information. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | No special conditions required beyond the plugin being installed and active on a WordPress site running version ≤1.2.12. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 7.5 score is well-supported by the vector metrics: AV:N confirms network exploitability, AC:L indicates no special conditions, PR:N means zero authentication is required, and C:H reflects meaningful data disclosure. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An unauthenticated attacker identifies a WordPress installation running SureFeedback Client Site ≤1.2.12 using passive enumeration (e.g., plugin path detection or WordPress scanner). The attacker then sends a crafted HTTP request directly to the plugin's exposed REST API or wp-admin/admin-ajax.php endpoint, which returns subscriber-level sensitive data without enforcing authorization checks. … |
| Remediation | The primary fix is to update the SureFeedback Client Site plugin beyond version 1.2.12 once a patched release is available from Brainstorm Force or the WordPress plugin repository; no specific fixed version was confirmed in available data at time of analysis. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, identify all WordPress instances running SureFeedback Client Site plugin version 1.2.12 or earlier and review access logs for unauthorized data retrieval patterns. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-862 – Missing Authorization
View allSame technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today