VulnCrest
Search
Create account
Report an incident
Radar sectionsPlugins & themes
Check my site

WordPress plugin

Survey Maker by AYS security & vulnerabilities

survey-maker— active installsLast vulnerability Aug 6, 2026

No known unpatched vulnerabilities in the latest version

All 26 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.

Watch plugin
26Known vulnerabilities
  • Critical0
  • High9
  • Medium17
  • Low0
Vulnerabilities per year
2021: 3 vulnerabilities3212022: 1 vulnerability1222023: 4 vulnerabilities4232024: 7 vulnerabilities7242025: 8 vulnerabilities8252026: 3 vulnerabilities326

All Survey Maker by AYS vulnerabilities

Survey Maker by AYS vulnerabilities
SeverityVulnerabilityCVEPublished
High7.2Unauthenticated Stored Cross-Site Scripting
≤5.2.3.3Update to 5.2.3.4
CVE-2026-65565
High7.2Unauthenticated Stored Cross-Site Scripting
≤5.2.2.5Update to 5.2.2.6
CVE-2026-57361
High7.2Unauthenticated Stored Cross-Site Scripting
<5.1.7.7Update to 5.1.7.7
CVE-2026-26370
Medium4.3Missing Authorization
≤5.1.9.4Update to 5.1.9.5
CVE-2025-64276
Medium5.3Missing Authorization to Unauthenticated Information Exposure
≤5.1.9.4Update to 5.1.9.5
CVE-2025-12891
Medium5.3Missing Authorization to Unauthenticated Limited Option Update
≤5.1.9.4Update to 5.1.9.5
CVE-2025-12892
Medium4.4Authenticated (Administrator+) Stored Cross-Site Scripting
≤5.1.8.8Update to 5.1.8.9
CVE-2025-48095
High7.2Unauthenticated Stored Cross-Site Scripting
≤5.1.8.8Update to 5.1.8.9
CVE-2025-48098
Medium5.3Unauthenticated Authorization Bypass
≤5.1.6.3Update to 5.1.6.4
CVE-2025-32275
Medium4.4Authenticated (Administrator+) Stored Cross-Site Scripting
≤5.1.3.5Update to 5.1.3.6
CVE-2025-22664
Medium5.5Authenticated (Admin+) Stored Cross-Site Scripting via Survey Question
≤5.1.3.3Update to 5.1.3.4
CVE-2024-13505
Medium4.4Authenticated (Administrator+) Stored Cross-Site Scripting
≤5.0.2Update to 5.0.3
CVE-2024-50426
Medium4.4Authenticated (Admin+) Stored Cross-Site Scripting
≤4.9.5Update to 4.9.6
CVE-2024-8488
Medium4.4Authenticated (Admin+) Stored Cross-Site Scripting
≤4.2.8Update to 4.2.9
CVE-2024-4061
High7.2Unauthenticated Stored Cross-Site Scripting
≤3.6.3Update to 3.6.4
CVE-2023-34423
Medium5.3IP Address Spoofing
≤4.0.9Update to 4.1.0
CVE-2023-35764
Medium6.1Reflected Cross-Site Scripting
≤4.0.6Update to 4.0.7
CVE-2024-29918
Medium4.4Authenticated (Administrator+) Stored Cross-Site Scripting
≤4.0.5Update to 4.0.6
CVE-2024-27996
Medium6.1Reflected Cross-Site Scripting via 'page' parameter
≤3.4.6Update to 3.4.7
CVE-2023-2572
Medium5.3Missing Authorization
≤3.2.0Update to 3.2.1
CVE-2023-22697
High8.8Authenticated (Subscriber+) SQL Injection
≤3.1.1Update to 3.1.2
CVE-2023-23490
High7.2Unauthenticated Stored Cross-Site Scripting
≤3.1.3Update to 3.1.4
CVE-2023-0038
Medium5.5Authenticated (Admin+) Stored Cross-Site Scripting
≤3.1.1Update to 3.1.2
—
High7.2Unauthenticated Stored Cross-Site Scripting
≤2.0.6Update to 2.0.7
CVE-2021-26256
High8.8Authenticated SQL Injection
<1.5.6Update to 1.5.6
CVE-2021-24459
Medium6.1Reflected Cross-Site Scripting
≤1.5.5Update to 1.5.6
—

Survey Maker by AYS: common questions

Does Survey Maker by AYS have known vulnerabilities?

Yes. VulnCrest Radar lists 26 known vulnerabilities in Survey Maker by AYS: 9 high, 17 medium. None are known to affect version null.

How do I check which version of Survey Maker by AYS I run?

In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.

What is the most recent Survey Maker by AYS vulnerability?

CVE-2026-65565, published Aug 6, 2026: Survey Maker by AYS <= 5.2.3.3 - Unauthenticated Stored Cross-Site Scripting. Severity: High (CVSS 7.2).

Is any Survey Maker by AYS vulnerability listed in CISA KEV?

No. None of the known Survey Maker by AYS vulnerabilities is currently listed in the CISA KEV catalog.

Search VulnCrest Radar

Jump to

Are you sure?