CVE-2026-80433: WordPress SureFeedback Client Site plugin <= 1.2.12 - Sensitive Data Exposure vulnerability
Published Aug 27, 2026
·Updated
Subscriber Sensitive Data Exposure in SureFeedback Client Site <= 1.2.12 versions.
Affected Software
1 affected component
wordpress/surefeedback-client-site<=1.2.12
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress SureFeedback Client Site pluginto a version that resolves this vulnerability.Fixed in 1.2.13
Event History
Aug 27, 2026
CVE Published
via MITRE·09:00 AM
Data Sourced
via MITRE·09:00 AM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·10:16 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this issue?
The CVSS vector indicates the issue is remotely exploitable with low attack complexity, requires no privileges, and does not require user interaction.
2
What is the likely security impact?
The reported impact is high confidentiality impact, with no integrity or availability impact indicated. Exploitation could expose sensitive data without modifying data or disrupting service.
3
Which plugin versions are affected?
SureFeedback Client Site versions 1.2.12 and earlier are identified as affected.