Wpfeedback vulnerabilities
We track 4 vulnerabilities in Wpfeedback products across 2 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on August 19, 2026.
Latest Wpfeedback vulnerabilities
- 8.1 High severity
Atarim – AI Agency for WordPress: Edit Pages…: Improper Limitation of a Pathname to a Restricted Directory
The Atarim – AI Agency for WordPress: Edit Pages, Fix Code, Update Plugins, SEO & Client Feedback plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the AVCF_Abilities_Media::register (replace-media-file e
- 7.5 High severity
Atarim – Visual Feedback, Review & AI…: Missing Authorization
The Visual Website Collaboration, Feedback & Project Management – Atarim plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the wpf_delete_file and wpf_delete_file functions in all versions up to, and including
- 7.2 High severity
Atarim – Visual Feedback, Review & AI…: Improper Neutralization of Input During Web Page Generation
The Visual Website Collaboration, Feedback & Project Management – Atarim plugin for WordPress is vulnerable to Stored Cross-Site Scripting via comments in all versions up to, and including, 3.30 due to insufficient input sanitization and output escaping. This
- 7.5 High severity
Atarim – Visual Feedback, Review & AI…: Use of Hard-coded Password
The Visual Website Collaboration, Feedback & Project Management – Atarim plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 3.22.6. This is due to the use of hardcoded credentials to authenticate all the incoming AP