Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

11 records

Vendor: devsoftbaltic Clear all filters
TI-2025-12073 CVE-2025-13205 · GHSA-m4wh-xwg4-x89g

Cross-site request forgery in devsoftbaltic SurveyJS: Drag & Drop Form Builder

Priority LOW 19

The SurveyJS: Drag & Drop WordPress Form Builder to create, style and embed multiple forms of any complexity plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.5.2.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00142 Published 2026-01-24 No fix listed CWE-352
TI-2025-12064 CVE-2025-13194 · GHSA-5rmm-4j55-92mf

Cross-site request forgery in devsoftbaltic SurveyJS: Drag & Drop Form Builder

Priority LOW 19

The SurveyJS: Drag & Drop WordPress Form Builder to create, style and embed multiple forms of any complexity plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.5.2.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00155 Published 2026-01-24 No fix listed CWE-352
TI-2025-23353 CVE-2025-32256 · GHSA-gq8p-m95r-vm25

WordPress SurveyJS plugin <= 1.12.20 - Broken Access Control vulnerability

Priority LOW 24

Missing Authorization vulnerability in devsoftbaltic SurveyJS surveyjs allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects SurveyJS: from n/a through <= 1.12.20.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0038 Published 2025-04-04 No fix listed CWE-862
TI-2025-23265 CVE-2025-32167 · GHSA-wh72-33m3-q8xj

WordPress SurveyJS plugin <= 1.12.20 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in devsoftbaltic SurveyJS surveyjs allows Stored XSS.This issue affects SurveyJS: from n/a through <= 1.12.20.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00407 Published 2025-04-04 No fix listed CWE-79
TI-2024-11639 CVE-2024-12544

Missing authorization in devsoftbaltic SurveyJS: Drag & Drop Form Builder

Priority MEDIUM 41

The SurveyJS: Drag & Drop WordPress Form Builder to create, style and embed multiple forms of any complexity plugin for WordPress is vulnerable to arbitrary file deletion due to a missing capability check on the callback…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00768 Published 2025-03-01 No fix listed CWE-862