Log in Start free

devsoftbaltic

Products

ProductCVEsExploitedLatest
SurveyJS: Drag & Drop Form Builder7–Mar 21, 2026
SurveyJS3–Apr 4, 2025

Exploited and recent CVEs

  • CVE-2026-2440 High 7.2 SurveyJS: Drag & Drop Form Builder <= 2.5.3 - Unauthenticated Stored Cross-Site Scripting 0.3%
  • CVE-2025-13205 Medium 4.3 SurveyJS: Drag & Drop WordPress Form Builder to create, style and embed multiple forms of any complexity <= 2.5.2 - Cross-Site Request Forgery to Survey Cloning 0.1%
  • CVE-2025-13194 Medium 4.3 SurveyJS: Drag & Drop WordPress Form Builder to create, style and embed multiple forms of any complexity <= 2.5.2 - Cross-Site Request Forgery to Survey Renaming 0.2%
  • CVE-2025-13139 Medium 4.3 SurveyJS: Drag & Drop WordPress Form Builder <= 2.5.2 - Cross-Site Request Forgery to Survey Creation 0.2%
  • CVE-2025-13140 Medium 4.3 SurveyJS: Drag & Drop WordPress Form Builder <= 1.12.20 - Cross-Site Request Forgery to Survey Deletion 0.2%
  • CVE-2025-3815 Medium 6.4 SurveyJS <= 1.12.32 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter 0.3%
  • CVE-2025-32256 Medium 5.3 WordPress SurveyJS plugin <= 1.12.20 - Broken Access Control vulnerability 0.4%
  • CVE-2025-32167 Medium 6.5 WordPress SurveyJS plugin <= 1.12.20 - Cross Site Scripting (XSS) vulnerability 0.4%
  • CVE-2024-12544 High 8.8 SurveyJS: Drag & Drop WordPress Form Builder to create, style and embed multiple forms of any complexity <= 1.12.17 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Deletion via SurveyJS_DeleteFile 0.8%
  • CVE-2024-50427 Critical 9.9 WordPress SurveyJS plugin <= 1.9.136 - Arbitrary File Upload vulnerability 1.0%