Devsoftbaltic Surveyjs vulnerabilities

• devsoftbaltic surveyjs: drag & drop form builder SurveyJS: Drag & Drop Form Builder <= 2.5.3 - Unauthenticated Stored Cross-Site Scripting CVE-2026-2440 7.2 HighMarch 21, 2026
• devsoftbaltic surveyjs: drag & drop form builder SurveyJS: Drag & Drop WordPress Form Builder to create, style and embed multiple forms of any complexity <= 2.5.2 - Cross-Site Request Forgery to Survey Cloning CVE-2025-13205 4.3 MediumJanuary 24, 2026
• devsoftbaltic surveyjs: drag & drop form builder SurveyJS: Drag & Drop WordPress Form Builder to create, style and embed multiple forms of any complexity <= 2.5.2 - Cross-Site Request Forgery to Survey Renaming CVE-2025-13194 4.3 MediumJanuary 24, 2026
• devsoftbaltic surveyjs: drag & drop form builder SurveyJS: Drag & Drop WordPress Form Builder <= 2.5.2 - Cross-Site Request Forgery to Survey Creation CVE-2025-13139 4.3 MediumJanuary 24, 2026
• devsoftbaltic surveyjs: drag & drop form builder SurveyJS: Drag & Drop WordPress Form Builder <= 1.12.20 - Cross-Site Request Forgery to Survey Deletion CVE-2025-13140 4.3 MediumDecember 2, 2025
• devsoftbaltic surveyjs: drag & drop form builder SurveyJS <= 1.12.32 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter CVE-2025-3815 6.4 MediumMay 3, 2025
• devsoftbaltic surveyjs WordPress SurveyJS plugin <= 1.12.20 - Broken Access Control vulnerability CVE-2025-32256 5.3 MediumApril 4, 2025
• devsoftbaltic surveyjs WordPress SurveyJS plugin <= 1.12.20 - Cross Site Scripting (XSS) vulnerability CVE-2025-32167 6.5 MediumApril 4, 2025
• devsoftbaltic surveyjs: drag & drop form builder SurveyJS: Drag & Drop WordPress Form Builder to create, style and embed multiple forms of any complexity <= 1.12.17 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Deletion via S… CVE-2024-12544 8.8 HighMarch 1, 2025
• devsoft baltic surveyjs WordPress SurveyJS plugin <= 1.9.136 - Arbitrary File Upload vulnerability CVE-2024-50427 Public exploit 9.9 CriticalOctober 29, 2024