Survey Maker by AYS

Уязвимости

• CVE-2023-22697без авторизации≤ 3.2.0

  WordPress Survey Maker plugin <= 3.2.0 - Broken Access Control vulnerability

  Критич. 9.8

• CVE-2026-65565без авторизации · нужен клик≤ 5.2.3.3

  WordPress Survey Maker plugin <= 5.2.3.3 - Cross Site Scripting (XSS) vulnerability

  Высокий 7.1

• CVE-2026-57361без авторизации · нужен клик≤ 5.2.2.5

  WordPress Survey Maker plugin <= 5.2.2.5 - Cross Site Scripting (XSS) vulnerability

  Высокий 7.1

• CVE-2025-48098без авторизации · нужен клик≤ 5.1.8.8

  WordPress Survey Maker plugin <= 5.1.8.8 - Cross Site Scripting (XSS) vulnerability

  Высокий 7.1

• CVE-2025-64276нужен вход≤ 5.1.9.4

  WordPress Survey Maker plugin <= 5.1.9.4 - Broken Access Control vulnerability

  Средний 6.5

• CVE-2023-34423без авторизации · нужен клик

  Survey Maker prior to 3.6.4 contains a stored cross-site scripting vulnerability.

  Средний 6.1

• CVE-2023-0038без авторизации≤ 3.1.3

  Survey Maker – Best WordPress Survey Plugin <= 3.1.3 - Unauthenticated Stored Cross-Site Scripting

  Средний 6.1

• CVE-2021-26256без авторизации · нужен клик≤ 2.0.6

  WordPress Survey Maker plugin <= 2.0.6 - Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability

  Средний 6.1

• CVE-2025-48095высокие права≤ 5.1.8.8

  WordPress Survey Maker plugin <= 5.1.8.8 - Cross Site Scripting (XSS) vulnerability

  Средний 5.9

• CVE-2024-29918без авторизации · нужен клик≤ 4.0.6

  WordPress Survey Maker plugin <= 4.0.6 - Reflected Cross Site Scripting (XSS) vulnerability

  Средний 5.4

• CVE-2025-12891без авторизации≤ 5.1.9.4

  Survey Maker <= 5.1.9.4 - Missing Authorization to Unauthenticated Information Exposure

  Средний 5.3

• CVE-2025-12892без авторизации≤ 5.1.9.4

  Survey Maker <= 5.1.9.4 - Missing Authorization to Unauthenticated Limited Option Update

  Средний 5.3

• CVE-2025-32275без авторизации · нужен клик≤ 5.1.6.3

  WordPress Survey Maker plugin <= 5.1.6.3 - Bypass vulnerability

  Средний 5.3

• CVE-2023-35764без авторизации

  Insufficient verification of data authenticity issue in Survey Maker prior to 3.6.4 allows a remote unauthenticated attacker to spoof an IP

  Средний 5.3

• CVE-2026-26370без авторизации · нужен клик

  WordPress Plugin "Survey Maker" versions 5.1.7.7 and prior contain a cross-site scripting vulnerability.

  Средний 5.1

• CVE-2025-22664высокие права≤ 5.1.3.5

  WordPress Survey Maker Plugin <= 5.1.3.5 - Cross Site Scripting (XSS) vulnerability

  Средний 4.8

• CVE-2024-13505админ≤ 5.1.3.3

  Survey Maker <= 5.1.3.3 - Authenticated (Admin+) Stored Cross-Site Scripting via Survey Question

  Средний 4.8

• CVE-2024-50426высокие права≤ 5.0.2

  WordPress Survey Maker plugin <= 5.0.2 - Cross Site Scripting (XSS) vulnerability

  Средний 4.8

• CVE-2024-8488админ≤ 4.9.5

  Survey Maker – Customer Satisfaction Questionnaire, Chat Survey, Calculation Form, Payment Forms <= 4.9.7 - Authenticated (Admin+) Stored Cross-Site Scripting

  Средний 4.8

• CVE-2024-27996высокие права≤ 4.0.5

  WordPress Survey Maker plugin <= 4.0.5 - Cross Site Scripting (XSS) vulnerability

  Средний 4.8