Survey Maker

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   Survey Maker

Information

Software Type Plugin
Software Slug survey-maker (view on wordpress.org)
Software Status Active
Software Author ays-pro
Software Website ays-pro.com
Software Downloads 386,701
Software Active Installs 6,000
Software Record Last Updated October 30, 2024

13 Vulnerabilities

Submit a Vulnerability
Survey Maker – Customer Satisfaction Questionnaire, Chat Survey, Calculation Form, Payment Forms <= 4.9.7 - Authenticated (Admin+) Stored Cross-Site Scripting
4.4
CVE-2024-8488
Oct 7, 2024
Researcher: Jonas Benjamin Friedli
Survey Maker – Customer Satisfaction Survey, Chat Survey, Calculaton Form, Payment Surveys <= 4.2.8 - Authenticated (Admin+) Stored Cross-Site Scripting
4.4
CVE-2024-4061
Apr 30, 2024
Researcher: Krugov Artyom
Survey Maker <= 4.0.9 - IP Address Spoofing
5.3
CVE-2023-35764
Apr 27, 2024
Researcher: Atsuya Yoda
Survey Maker – Best WordPress Survey Plugin <= 3.6.6 - Unauthenticated Stored Cross-Site Scripting
7.2
CVE-2023-34423
Apr 27, 2024
Researcher: Atsuya Yoda
Survey Maker <= 4.0.6 - Reflected Cross-Site Scripting
6.1
CVE-2024-29918
Mar 25, 2024
Researcher: Dimas Maulana
Survey Maker <= 4.0.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
4.4
CVE-2024-27996
Mar 15, 2024
Researcher: Joel Indra
Survey Maker <= 3.4.6 - Reflected Cross-Site Scripting via 'page' parameter
6.1
CVE-2023-2572
May 15, 2023
Researcher: Erwan LR
Survey Maker < 3.1.2 - Authenticated (Subscriber+) SQL Injection
8.8
CVE-2023-23490
Jan 12, 2023
Researcher: Joshua Martinelle
Survey Maker – Best WordPress Survey Plugin <= 3.1.3 - Unauthenticated Stored Cross-Site Scripting
7.2
CVE-2023-0038
Jan 3, 2023
Researcher: Chloe Chamberland
Survey Maker – Best WordPress Survey Plugin <= 3.1.1 - Authenticated (Admin+) Stored Cross-Site Scripting
5.5
CVE ID Unknown
Dec 22, 2022
Researchers:
Survey Maker <= 2.0.6 - Unauthenticated Stored Cross-Site Scripting
7.2
CVE-2021-26256
Dec 3, 2021
Researcher: Ngo Van Thien
Survey Maker – Best WordPress Survey Plugin <= 1.5.5 - Reflected Cross-Site Scripting
6.1
CVE ID Unknown
Jun 29, 2021
Researcher: WPScanTeam
Survey Maker < 1.5.6 - Authenticated SQL Injection
8.8
CVE-2021-24459
Jun 29, 2021
Researcher: To Quang Duong
Title Status CVE ID CVSS Researchers Date
Survey Maker – Customer Satisfaction Questionnaire, Chat Survey, Calculation Form, Payment Forms <= 4.9.7 - Authenticated (Admin+) Stored Cross-Site Scripting Patched CVE-2024-8488 4.4 Jonas Benjamin Friedli October 7, 2024
Survey Maker – Customer Satisfaction Survey, Chat Survey, Calculaton Form, Payment Surveys <= 4.2.8 - Authenticated (Admin+) Stored Cross-Site Scripting Patched CVE-2024-4061 4.4 Krugov Artyom April 30, 2024
Survey Maker <= 4.0.9 - IP Address Spoofing Patched CVE-2023-35764 5.3 Atsuya Yoda April 27, 2024
Survey Maker – Best WordPress Survey Plugin <= 3.6.6 - Unauthenticated Stored Cross-Site Scripting Patched CVE-2023-34423 7.2 Atsuya Yoda April 27, 2024
Survey Maker <= 4.0.6 - Reflected Cross-Site Scripting Patched CVE-2024-29918 6.1 Dimas Maulana March 25, 2024
Survey Maker <= 4.0.5 - Authenticated (Administrator+) Stored Cross-Site Scripting Patched CVE-2024-27996 4.4 Joel Indra March 15, 2024
Survey Maker <= 3.4.6 - Reflected Cross-Site Scripting via 'page' parameter Patched CVE-2023-2572 6.1 Erwan LR May 15, 2023
Survey Maker < 3.1.2 - Authenticated (Subscriber+) SQL Injection Patched CVE-2023-23490 8.8 Joshua Martinelle January 12, 2023
Survey Maker – Best WordPress Survey Plugin <= 3.1.3 - Unauthenticated Stored Cross-Site Scripting Patched CVE-2023-0038 7.2 Chloe Chamberland January 3, 2023
Survey Maker – Best WordPress Survey Plugin <= 3.1.1 - Authenticated (Admin+) Stored Cross-Site Scripting Patched 5.5 December 22, 2022
Survey Maker <= 2.0.6 - Unauthenticated Stored Cross-Site Scripting Patched CVE-2021-26256 7.2 Ngo Van Thien December 3, 2021
Survey Maker – Best WordPress Survey Plugin <= 1.5.5 - Reflected Cross-Site Scripting Patched 6.1 WPScanTeam June 29, 2021
Survey Maker < 1.5.6 - Authenticated SQL Injection Patched CVE-2021-24459 8.8 To Quang Duong June 29, 2021

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation