WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
survey-maker
Published
2025-11-12
Title
Survey Maker < 5.1.9.5 - Missing Authorization to Unauthenticated Limited Option Update
Slug
survey-maker
Published
2025-11-12
Title
Survey Maker < 5.1.9.5 - Missing Authorization to Unauthenticated Information Exposure
Slug
survey-maker
Published
2025-11-14
Title
Survey Maker < 5.1.9.5 - Missing Authorization
Slug
survey-maker
Published
2026-07-01
Title
Survey Maker by AYS < 5.2.2.6 - Unauthenticated Stored Cross-Site Scripting
Slug
survey-maker
Published
2026-02-20
Title
Survey Maker by AYS < 5.1.7.7 - Unauthenticated Stored Cross-Site Scripting
Slug
survey-maker
Published
2026-08-06
Title
Survey Maker by AYS < 5.2.3.4 - Unauthenticated Stored Cross-Site Scripting
Slug
surveyanyplace
Published
2025-09-29
Title
SurveyAnyplace Plugin <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
surveyfunnel-lite
Published
2025-12-04
Title
SurveyFunnel – Survey Plugin for WordPress <= 1.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
surveyfunnel-lite
Published
2025-12-04
Title
SurveyFunnel – Survey Plugin for WordPress <= 1.1.5 - Unauthenticated Information Exposure
Slug
surveyjs
Published
2024-10-24
Title
SurveyJS: Drag & Drop WordPress Form Builder < 1.12.4 - Authenticated (Subscriber+) Arbitrary File Upload
Slug
surveyjs
Published
2025-02-28
Title
SurveyJS: Drag & Drop WordPress Form Builder to create, style and embed multiple forms of any complexity < 1.12.18 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Deletion via SurveyJS_DeleteFile
Slug
surveyjs
Published
2025-04-04
Title
SurveyJS < 1.12.57 - Missing Authorization
Slug
surveyjs
Published
2025-04-04
Title
SurveyJS < 1.12.57 - Contributor+ Stored XSS
Slug
surveyjs
Published
2025-05-02
Title
SurveyJS < 1.12.33 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter
Slug
surveyjs
Published
2025-12-01
Title
SurveyJS: Drag & Drop WordPress Form Builder < 1.20.27 - Cross-Site Request Forgery to Survey Deletion
Slug
surveyjs
Published
2026-01-23
Title
SurveyJS: Drag & Drop WordPress Form Builder < 2.5.3 - Cross-Site Request Forgery to Survey Creation
Slug
surveyjs
Published
2026-01-23
Title
SurveyJS: Drag & Drop WordPress Form Builder to create, style and embed multiple forms of any complexity < 2.5.3 - Cross-Site Request Forgery to Survey Renaming
Slug
surveyjs
Published
2026-01-23
Title
SurveyJS: Drag & Drop WordPress Form Builder to create, style and embed multiple forms of any complexity < 2.5.3 - Cross-Site Request Forgery to Survey Cloning
Slug
surveyjs
Published
2026-03-20
Title
SurveyJS: Drag & Drop Form Builder <= 2.5.3 - Unauthenticated Stored Cross-Site Scripting
Slug
surveys
Published
2017-05-21
Title
Surveys 1.01.8 - Authenticated SQL Injection
Slug
sv-columns-manager
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
sv-columns-manager
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
sv-forms
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
sv-forms
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
sv-forms
Published
2024-11-08
Title
SV Forms <= 2.0.05 - Authenticated (Contributor+) Stored Cross-Site Scripting