CVE-2026-80433
Received Received - Intake

Subscriber Sensitive Data Exposure in SureFeedback Client

Publication date: 2026-08-27

Last updated on: 2026-08-27

Assigner: Patchstack

Description
Subscriber Sensitive Data Exposure in SureFeedback Client Site <= 1.2.12 versions.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-27
Last Modified
2026-08-27
Generated
2026-08-27
AI Q&A
2026-08-27
EPSS Evaluated
N/A
NVD
CVE-2026-80433
EUVD
EUVD-2026-66948

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
patchstack wordpress_surefeedback_client_site_plugin to 1.2.12 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-862 The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-80433 is a vulnerability in the WordPress SureFeedback Client Site Plugin versions 1.2.12 and below. It allows malicious actors to access sensitive data that should be restricted to regular users. The issue is classified as sensitive data exposure under OWASP Top 10 category A3.

Detection Guidance

To detect this vulnerability, check if the SureFeedback Client Site plugin version is 1.2.12 or below. Inspect WordPress installations for the plugin and verify the version number in the admin panel or via file inspection.

Impact Analysis

This vulnerability can lead to unauthorized access to confidential information, potentially exposing user data, feedback, or other sensitive details. Attackers may exploit it to steal data, leading to privacy breaches or further attacks on affected websites.

Compliance Impact

This vulnerability could result in non-compliance with GDPR, HIPAA, or other privacy regulations due to unauthorized data exposure. Organizations may face legal penalties, reputational damage, and loss of trust if sensitive data is compromised.

Mitigation Strategies

Update the SureFeedback Client Site plugin to version 1.2.13 or later immediately. If updating is not possible, apply the mitigation rule provided by Patchstack to block attacks until the update is completed.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-80433. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart