plugin
8 known security issues reported for the Helpful WordPress plugin. Most recent disclosed May 3, 2023.
Running Helpful on your site? Check whether your installed version is affected.
Scan your site freeUpdate the WordPress Helpful plugin to the latest available version (at least 4.5.15). An unknown person discovered and reported this Bypass Vulnerability vulnerability in WordPress Helpful Plugin. A bypass vulnerability could allow a malicious actor to bypass certain restrictions in the code. This vulnerability has be...
[en] The Helpful WordPress plugin before 4.5.26 puts the exported logs and feedbacks in a publicly accessible location and guessable names, which could allow attackers to download them and retrieve sensitive information such as IP, Names and Email Address depending on the plugin's settings
The Helpful plugin for WordPress is vulnerable to Sensitive Data Exposure in versions up to, and including, 4.5.25. Specifically, feedback and logs are stored in predictable locations with guessable file names. This could allow unauthenticated attackers to extract sensitive user data.
The Helpful plugin for WordPress is vulnerable to repeat voting in versions up to, and including, 4.5.14 due to insufficient voting verification/authorization. This makes it possible for authenticated attackers to vote more than once in polls created with the plugin.
The Helpful plugin for WordPress is vulnerable to repeat voting in versions up to, and including, 4.5.14 due to insufficient voting verification/authorization. This makes it possible for authenticated attackers to vote more than once in polls created with the plugin.
[en] The Helpful WordPress plugin before 4.4.59 does not sanitise and escape some of its settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed
The Helpful WordPress plugin before 4.4.59 does not sanitise and escape some of its settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed
The plugin allowed users to vote more than once, which could allow attackers to increase votes drastically on some posts
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free