devsoftbaltic SurveyJS: Drag & Drop Form Builder

• CVE-2026-2440 High 7.2 SurveyJS: Drag & Drop Form Builder <= 2.5.3 - Unauthenticated Stored Cross-Site Scripting 0.3%
• CVE-2025-13205 Medium 4.3 SurveyJS: Drag & Drop WordPress Form Builder to create, style and embed multiple forms of any complexity <= 2.5.2 - Cross-Site Request Forgery to Survey Cloning 0.1%
• CVE-2025-13194 Medium 4.3 SurveyJS: Drag & Drop WordPress Form Builder to create, style and embed multiple forms of any complexity <= 2.5.2 - Cross-Site Request Forgery to Survey Renaming 0.2%
• CVE-2025-13139 Medium 4.3 SurveyJS: Drag & Drop WordPress Form Builder <= 2.5.2 - Cross-Site Request Forgery to Survey Creation 0.2%
• CVE-2025-13140 Medium 4.3 SurveyJS: Drag & Drop WordPress Form Builder <= 1.12.20 - Cross-Site Request Forgery to Survey Deletion 0.2%
• CVE-2025-3815 Medium 6.4 SurveyJS <= 1.12.32 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter 0.3%
• CVE-2024-12544 High 8.8 SurveyJS: Drag & Drop WordPress Form Builder to create, style and embed multiple forms of any complexity <= 1.12.17 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Deletion via SurveyJS_DeleteFile 0.8%