Plugin icon

Survey Maker by AYS

survey-maker

Vulnerabilities:

21

Last Updated:

June 25, 2026

Active Installs:

6000

Published
Title
Fixed in
CVSS
Published
2025-11-14
Title
Survey Maker < 5.1.9.5 - Missing Authorization
Fixed in
Fixed in 5.1.9.5
CVSS
4.3 (medium)
Published
2025-11-12
Title
Survey Maker < 5.1.9.5 - Missing Authorization to Unauthenticated Information Exposure
Fixed in
Fixed in 5.1.9.5
CVSS
5.3 (medium)
Published
2025-11-12
Title
Survey Maker < 5.1.9.5 - Missing Authorization to Unauthenticated Limited Option Update
Fixed in
Fixed in 5.1.9.5
CVSS
5.3 (medium)
Published
2025-10-09
Title
Survey Maker < 5.1.8.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
Fixed in
Fixed in 5.1.8.9
CVSS
4.4 (medium)
Published
2025-10-09
Title
Survey Maker < 5.1.8.9 - Unauthenticated Stored Cross-Site Scripting
Fixed in
Fixed in 5.1.8.9
CVSS
7.2 (high)
Published
2025-04-07
Title
Survey Maker < 5.1.6.4 - Unauthenticated Authorization Bypass
Fixed in
Fixed in 5.1.6.4
CVSS
5.3 (medium)
Published
2025-02-03
Title
Survey Maker < 5.1.3.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Fixed in
Fixed in 5.1.3.6
CVSS
4.4 (medium)
Published
2025-01-25
Title
Survey Maker < 5.1.3.4 - Authenticated (Admin+) Stored Cross-Site Scripting via Survey Question
Fixed in
Fixed in 5.1.3.4
CVSS
5.5 (medium)
Published
2024-10-24
Title
Survey Maker < 5.0.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Fixed in
Fixed in 5.0.3
CVSS
4.4 (medium)
Published
2024-10-07
Title
Survey Maker – Customer Satisfaction Questionnaire, Chat Survey, Calculation Form, Payment Forms < 4.9.6 - Authenticated (Admin+) Stored Cross-Site Scripting
Fixed in
Fixed in 4.9.6
CVSS
4.4 (medium)
Published
2024-04-30
Title
Survey Maker < 4.2.9 - Admin+ Stored XSS via Plugin Settings
Fixed in
Fixed in 4.2.9
CVSS
3.5 (low)
Published
2024-04-27
Title
Survey Maker – Best WordPress Survey Plugin < 3.6.4 - Unauthenticated Stored Cross-Site Scripting
Fixed in
Fixed in 3.6.4
CVSS
7.2 (high)
Published
2024-04-27
Title
Survey Maker < 4.1.0 - IP Address Spoofing
Fixed in
Fixed in 4.1.0
CVSS
5.3 (medium)
Published
2024-03-25
Title
Survey Maker < 4.0.7 - Reflected Cross-Site Scripting
Fixed in
Fixed in 4.0.7
CVSS
6.1 (medium)
Published
2024-03-15
Title
Survey Maker < 4.0.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Fixed in
Fixed in 4.0.6
CVSS
4.4 (medium)
Published
2023-05-15
Title
Survey Maker < 3.4.7 - Reflected XSS
Fixed in
Fixed in 3.4.7
CVSS
7.1 (high)
Published
2023-01-12
Title
Survey Maker < 3.1.2 - Subscriber+ SQLi
Fixed in
Fixed in 3.1.2
CVSS
7.7 (high)
Published
2023-01-03
Title
Survey Maker < 3.1.4 - Unauthenticated Stored XSS
Fixed in
Fixed in 3.1.4
CVSS
8.8 (high)
Published
2021-12-03
Title
Survey Maker < 2.0.7 - Unauthenticated Store Cross-Site Scripting
Fixed in
Fixed in 2.0.7
CVSS
4.7 (medium)
Published
2021-06-29
Title
Survey Maker < 1.5.6 - Authenticated Blind SQL Injections
Fixed in
Fixed in 1.5.6
CVSS
7.6 (high)
Published
2021-06-29
Title
Multiple Plugins from AYS Pro - Reflected Cross-Site Scripting (XSS)
Fixed in
Fixed in 1.5.6
CVSS
7.1 (high)