Medium severity5.3NVD Advisory· Published Oct 25, 2025· Updated Apr 15, 2026
CVE-2025-10694
CVE-2025-10694
Description
The User Feedback – Create Interactive Feedback Form, User Surveys, and Polls in Seconds plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the maybe_load_onboarding_wizard function in all versions up to, and including, 1.8.0. This makes it possible for unauthenticated attackers to access the onboarding wizard page and view configuration information including the administrator email address.
Affected products
2- Range: <=1.8.0
- WordPress/User Feedback – Create Interactive Feedback Form, User Surveys, and Polls in Secondsllm-createRange: <=1.8.0
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2News mentions
0No linked articles in our index yet.