PT-2025-49215

CVE-2025-13528

·

Published

2025-12-04

·

Updated

2026-10-18

Description by

CVSS 3.1
5.3
Medium
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions Feedback Modal for Website plugin for WordPress versions up to and including 1.0.1
Description The software is susceptible to unauthorized data access. A missing capability check within the handle export function allows unauthenticated attackers to export all feedback data in CSV or JSON format through the export data parameter.
Recommendations Update the Feedback Modal for Website plugin to a version later than 1.0.1.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-862: Missing Authorization
Related identifiers
CVE-2025-13528
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com