Technical impact
The Feedback Modal for Website plugin contains an authorization bypass in its handle_export function. All versions up to 1.0.1 allow anyone to trigger the export_data parameter and download all collected feedback in CSV or JSON format. Because the check for the required capability is missing, the vulnerability permits uncontrolled disclosure of potentially sensitive user input, violating confidentiality. Affected systems are WordPress sites that have installed the nedwp Feedback Modal for Website plugin. Versions from the original release through 1.0.1 are vulnerable. The flaw exists in the plugin’s admin code that handles export requests. Risk and exploitability are moderate (CVSS 5.3) but the EPSS score is below 1%, suggesting low current exploitation probability. The vulnerability is not in the CISA KEV catalog. Attackers can exploit it remotely via a simple HTTP request to the export_data endpoint, with no authentication required, making it straightforward for anyone with network access to extract all feedback data.
Affected Systems
WordPress sites running the nedwp Feedback Modal for Website plugin up through version 1.0.1 are affected.
Risk and Exploitability
Moderate risk with a CVSS score of 5.3. The EPSS score indicates a very low exploitation probability (<1%). This vulnerability is not listed in the CISA KEV catalog. Attackers can remotely trigger the export_data endpoint without authentication, exploiting the missing capability check to exfiltrate all feedback data in CSV or JSON format.
