SureFeedback Client Site

SureFeedback Client Site has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2026; all 2 are fixed as of September 2026. Their average CVSS score is 4.3, and the most serious one scores 4.3 out of 10.

The most common weakness is Exposure Of Sensitive Information To An Unauthorized Actor, behind 1 of the records (50%). Other recurring categories include Missing Authorization.

Every one of the 2 issues recorded for SureFeedback Client Site has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each. SureFeedback Client Site is installed on roughly 5,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.

Strategic Overview

Avg CVSSMedium

4.3/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all SureFeedback Client Site vulnerabilities before they are exploited.

Highest severity on recordCVSS 4.3CVE-2026-80433

SureFeedback Client Site <= 1.2.12 - Authenticated (Subscriber+) Information Exposure

Read the full analysis

Vulnerability Records

2 records


2026-08-26 00:00	SureFeedback Client Site <= 1.2.12 - Authenticated (Subscriber+) Information Exposure SureFeedback Client Site <= 1.2.12	`CVE-2026-80433`	4.3 Medium	doyz	Yes
2023-12-26 00:00	ProjectHuddle Client Site <= 1.0.34 - Missing Authorization via ph_child_ajax_notice_handler SureFeedback Client Site <= 1.0.34	`CVE-2023-51376`	4.3 Medium	Rafie Muhammad	Yes

Showing 1–2 of 2 reports

Latestv1.2.13

SureFeedback Client Site

Author

Brainstorm Force

4.0(39)

80/100

Last Updated

2026-08-25 (19d ago)

Active Installs

5,000+

Downloads

188,927

Requires WP

4.7+

Requires PHP

5.6+

Tested up to

WP 7.1

Created

2019-07-23 (7y ago)

This is the Child plugin for SureFeedback The SureFeedback plugin lets you collect sticky note-style feedback on page designs and web projects. It’s so easy to use. Clients can select specific areas of your design, point, click, and type constructive comments on top of your mockups and site designs. Using SureFeedback, the client can show as well as tell, providing targeted feedback for a more efficient workflow. SureFeedback is a self-hosted client feedback system that allows you to get feedback on an endless amount of client sites from one central dashboard. The SureFeedback Client Site plugin is used to securely sync multiple WordPress client identities with your SureFeedback parent site. All you need to do is install the plugin on the site you want feedback on and it’s ready to go. Features include: Connect and sync your client’s identities with your SureFeedback projects. No login or registration is required if your client is logged into their own site. Choose which roles you want to allow for commenting. Allow non-users (guests) to leave comments. Optionally enable commenting on the WordPress admin. White label support

View on WordPress.org