Userback
Userback has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2025; all 2 are fixed as of September 2026. Their average CVSS score is 4.3, and the most serious one scores 4.3 out of 10.
The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (50%). Other recurring categories include Missing Authorization.
Every one of the 2 issues recorded for Userback has a vendor fix available, so running the current release closes all known holes.
2 independent researchers contributed these findings, one record each. Userback is installed on roughly 2,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.
CVE-2025-14540Userback <= 1.0.15 - Missing Authorization to Authenticated (Subscriber+) Plugin's Configuration Exposure
Read the full analysisVulnerability Records
Userback
Author
userback
Userback is a powerful visual feedback tool that makes it easy to collect website feedback, report bugs, and collaborate with your team—all from your WordPress site. Whether you’re a developer, designer, or product manager, Userback helps you gather clear, actionable insights to improve your website faster. With Userback, users can submit annotated screenshots, video recordings, and comments directly on your site, helping you identify issues and improve the user experience without endless email threads or unclear feedback. How It Works With Userback, your clients and team can easily submit feedback and bug reports directly on your WordPress site. Our feedback widget captures a screenshot automatically, allowing users to annotate and highlight issues for clear communication. All feedback can seamlessly be managed in Userback, or sent to your preferred project management tool, complete with technical details to help developers quickly understand and reproduce issues. With our 2-way sync integrations, you can collaborate effortlessly, respond to feedback, update statuses, and keep clients informed without leaving your workflow. Key Features Visual Feedback – Users can submit annotated screenshots and video recordings to highlight issues. Bug Reporting – Capture technical details like browser info, console logs, and screen size for faster issue resolution. Customizable Feedback Widget – Control the look, feel, and functionality to match your brand. User Surveys – Collect targeted insights with customizable surveys to understand user needs, preferences, and pain points. Session Replay – Watch real user sessions to see exactly how they interact with your site, helping you identify friction points and improve the user experience. Team Collaboration – Assign feedback, track progress, and integrate with project management tools. Workflow Automation – Streamline your feedback process with automated workflows and notifications. WordPress Plugin Features Easy Setup – Install and activate in just a few clicks – no coding required. Widget Control – Show or hide the feedback widget for specific users or pages. Performance Optimized – The lightweight plugin ensures your site speed remains unaffected. Start Free Ready to improve your WordPress website with better feedback? Get started with a free Userback account at userback.io.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C