Read the docs

Wp Survey Plus Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Wp Survey Plus Project records in CISA KEV

No Wp Survey Plus Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Wp Survey Plus 1 record LOW

Records

1 record in Wp Survey Plus · all components

TI-2021-07083 CVE-2021-24801 · GHSA-hcgv-j4c6-h26m

WP Survey Plus <= 1.0 - Subscriber+ AJAX Calls

Priority LOW 20

The WP Survey Plus WordPress plugin through 1.0 does not have any authorisation and CSRF checks in place in its AJAX actions, allowing any user to call them and add/edit/delete Surveys.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.0045 Published 2021-11-08 No fix listed CWE-284
Open these records in search →