WordPress plugin
SureFeedback Client Site security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 2 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High0
- Medium2
- Low0
All SureFeedback Client Site vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium4.3 | Authenticated (Subscriber+) Information Exposure ≤1.2.12Update to 1.2.13 | CVE-2026-80433 | |
| Medium4.3 | Missing Authorization via ph_child_ajax_notice_handler ≤1.0.34Update to 1.0.35 | CVE-2023-51376 |
- Medium4.3Authenticated (Subscriber+) Information Exposure
≤1.2.12Update to 1.2.13
- Medium4.3Missing Authorization via ph_child_ajax_notice_handler
≤1.0.34Update to 1.0.35
SureFeedback Client Site: common questions
Does SureFeedback Client Site have known vulnerabilities?
Yes. VulnCrest Radar lists 2 known vulnerabilities in SureFeedback Client Site: 2 medium. None are known to affect version null.
How do I check which version of SureFeedback Client Site I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent SureFeedback Client Site vulnerability?
CVE-2026-80433, published Aug 26, 2026: SureFeedback Client Site <= 1.2.12 - Authenticated (Subscriber+) Information Exposure. Severity: Medium (CVSS 4.3).
Is any SureFeedback Client Site vulnerability listed in CISA KEV?
No. None of the known SureFeedback Client Site vulnerabilities is currently listed in the CISA KEV catalog.