Approved changes feed: RSS · Atom

cpe:2.3:a:ays_pro:survey_maker:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAys Pro (baec0466-3d3a-5cae-863d-5da547e565f4)
ProductSurvey Maker (92b0c1a2-0e45-5876-85ae-47056ba93f2f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-57361 vulnerable 2026-07-29 01:00:29.663411 WordPress Survey Maker plugin <= 5.2.2.5 - Cross Site Scripting (XSS) vulnerability
HIGH (7.1)
Unauthenticated Cross Site Scripting (XSS) in Survey Maker <= 5.2.2.5 versions.
Published: 2026-07-02T11:15:21.096Z
Updated: 2026-07-02T19:45:39.467Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-26370 vulnerable 2026-06-08 07:53:21.632089 Details available
MEDIUM (6.1)
WordPress Plugin "Survey Maker" versions 5.1.7.7 and prior contain a cross-site scripting vulnerability. If this vulnerability is exploited, an arbitrary script may be executed in the user's web browser.
Published: 2026-02-20T07:42:15.263Z
Updated: 2026-02-20T13:54:24.585Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-64276 vulnerable 2026-06-08 07:39:18.316397 WordPress Survey Maker plugin <= 5.1.9.4 - Broken Access Control vulnerability
MEDIUM (6.5)
Missing Authorization vulnerability in Ays Pro Survey Maker survey-maker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Survey Maker: from n/a through <= 5.1.9.4.
Published: 2025-11-13T09:24:31.911Z
Updated: 2026-04-28T18:29:22.429Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-48098 vulnerable 2026-06-08 07:27:15.478106 WordPress Survey Maker plugin <= 5.1.8.8 - Cross Site Scripting (XSS) vulnerability
HIGH (7.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ays Pro Survey Maker survey-maker allows Stored XSS.This issue affects Survey Maker: from n/a through <= 5.1.8.8.
Published: 2025-10-22T14:32:07.268Z
Updated: 2026-04-28T20:18:25.154Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-48095 vulnerable 2026-06-08 07:27:15.475322 WordPress Survey Maker plugin <= 5.1.8.8 - Cross Site Scripting (XSS) vulnerability
MEDIUM (5.9)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ays Pro Survey Maker survey-maker allows Stored XSS.This issue affects Survey Maker: from n/a through <= 5.1.8.8.
Published: 2025-10-22T14:32:06.692Z
Updated: 2026-04-28T20:18:05.889Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-32275 vulnerable 2026-06-08 07:18:59.402874 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-22664 vulnerable 2026-06-08 07:10:54.595327 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-50426 vulnerable 2026-06-08 06:52:10.057234 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-22697 vulnerable 2026-06-08 05:54:26.916717 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-24459 vulnerable 2026-06-08 05:30:04.413541 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.