Skip to content
Devsoftbaltic vulnerabilities
Newest
-
devsoftbaltic surveyjs: drag & drop form builder
SurveyJS: Drag & Drop Form Builder <= 2.5.3 - Unauthenticated Stored Cross-Site Scripting
CVE-2026-2440
7.2 High
-
devsoftbaltic surveyjs: drag & drop form builder
SurveyJS: Drag & Drop WordPress Form Builder to create, style and embed multiple forms of any complexity <= 2.5.2 - Cross-Site Request Forgery to Survey Cloning
CVE-2025-13205
4.3 Medium
-
devsoftbaltic surveyjs: drag & drop form builder
SurveyJS: Drag & Drop WordPress Form Builder to create, style and embed multiple forms of any complexity <= 2.5.2 - Cross-Site Request Forgery to Survey Renaming
CVE-2025-13194
4.3 Medium
-
devsoftbaltic surveyjs: drag & drop form builder
SurveyJS: Drag & Drop WordPress Form Builder <= 2.5.2 - Cross-Site Request Forgery to Survey Creation
CVE-2025-13139
4.3 Medium
-
devsoftbaltic surveyjs: drag & drop form builder
SurveyJS: Drag & Drop WordPress Form Builder <= 1.12.20 - Cross-Site Request Forgery to Survey Deletion
CVE-2025-13140
4.3 Medium
-
devsoftbaltic surveyjs: drag & drop form builder
SurveyJS <= 1.12.32 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter
CVE-2025-3815
6.4 Medium
-
devsoftbaltic surveyjs
WordPress SurveyJS plugin <= 1.12.20 - Broken Access Control vulnerability
CVE-2025-32256
5.3 Medium
-
devsoftbaltic surveyjs
WordPress SurveyJS plugin <= 1.12.20 - Cross Site Scripting (XSS) vulnerability
CVE-2025-32167
6.5 Medium
-
devsoftbaltic surveyjs: drag & drop form builder
SurveyJS: Drag & Drop WordPress Form Builder to create, style and embed multiple forms of any complexity <= 1.12.17 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Deletion via S…
CVE-2024-12544
8.8 High
-
devsoft baltic surveyjs
WordPress SurveyJS plugin <= 1.9.136 - Arbitrary File Upload vulnerability
CVE-2024-50427
Public exploit
9.9 Critical
-
surveyjs survey creator, devsoftbaltic survey-creator +1 more
Cross-site scripting in Survey Creator
CVE-2024-28635
Fix available
6.1 Medium