Known vulnerabilities in UserFeedback – Create Interactive Feedback Form, User Surveys, and Polls in Seconds

Ultimate user feedback plugin to ask questions, surveys, polls, from your website in seconds

9Reported vulnerabilities

7.2Highest CVSS score

1.11.3Latest version

200,000+Active installs

What to do now

Update UserFeedback – Create Interactive Feedback Form, User Surveys, and Polls in Seconds to 1.11.0 or later. 9 of these have a fixed version available. Updating resolves them.

Plugin last updated: July 15, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVE	Severity	Exploit probability next 30 days	Affected versions	Fixed in	Published
CVE-2023-46153	High 7.2	0.4%	1.0.9 and earlier	`1.0.10`	October 17, 2023
CVE-2023-39308	High 7.2	0.5%	1.0.7 and earlier	`1.0.8`	September 4, 2023
CVE-2024-5902	Medium 6.1	0.4%	0 to 1.0.15 (inclusive) 0 to 1.0.15 (inclusive)	`1.0.16`	July 12, 2024
CVE-2024-0903	Medium 5.4	0.4%	1.0.13 and earlier	`1.0.14`	February 21, 2024
CVE-2025-10694	Medium 5.3	0.2%	0 to 1.8.0 (inclusive)	`1.9.0`	October 25, 2025
CVE-2023-50887	Medium 5.3	0.5%	1.0.10 and earlier	`1.0.11`	December 26, 2023
CVE-2026-39475	Medium 4.9	0.3%	1.10.1 and earlier	`1.11.0`	February 20, 2026
CVE-2025-68496	Medium 4.9	0.5%	1.10.0 and earlier	`1.10.1`	December 22, 2025
CVE-2026-39476	Medium 4.3	0.2%	1.10.1 and earlier	`1.11.0`	March 18, 2026

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.