CVE-2022-2834: Helpful Project Helpful

Medium severity, CVSS 5.3. EPSS: 0.8% chance of exploitation in the next 30 days.

The Helpful WordPress plugin before 4.5.26 puts the exported logs and feedbacks in a publicly accessible location and guessable names, which could allow attackers to download them and retrieve sensitive information such as IP, Names and Email Address depending on the plugin's settings

Affected products

• Helpful Project Helpful: before 4.5.26 (fixed in 4.5.26)

Published 2022-10-17. Last modified 2026-06-17.