What’s Vulnerable › Vulnerabilities

CVE-2022-2834: Helpful < 4.5.26 - Information Disclosure

• Severity: medium (CVSS 5.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2022-10-17 · updated 2026-06-17
• Weakness: CWE-552

Description

The Helpful WordPress plugin before 4.5.26 puts the exported logs and feedbacks in a publicly accessible location and guessable names, which could allow attackers to download them and retrieve sensitive information such as IP, Names and Email Address depending on the plugin's settings

Affected products

• Helpful: before 4.5.26 — fixed in 4.5.26

How to fix

Upgrade to a fixed version: Helpful 4.5.26. Check the vendor advisory for mitigations.

References

• https://wpscan.com/vulnerability/468d5fc7-04c6-4354-b134-85ebb25b37ae
• https://wpscan.com/vulnerability/468d5fc7-04c6-4354-b134-85ebb25b37ae

Get alerted when CVE-2022-2834 or the next vulnerability affects your stack