Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

SurveyJS: Drag & Drop Form Builder — Vulnerabilities & Security Advisories 7

All 7 CVE vulnerabilities found in SurveyJS: Drag & Drop Form Builder, with AI-generated Chinese analysis, references, and POCs.

Vendor: devsoftbaltic

CVE IDTitleCVSSSeverityPublished
CVE-2026-2440 SurveyJS: Drag & Drop Form Builder <= 2.5.3 - Unauthenticated Stored Cross-Site Scripting CWE-79 7.2 High2026-03-21
CVE-2025-13205 SurveyJS: Drag & Drop WordPress Form Builder to create, style and embed multiple forms of any complexity <= 2.5.2 - Cross-Site Request Forgery to Survey Cloning CWE-352 4.3 Medium2026-01-24
CVE-2025-13194 SurveyJS: Drag & Drop WordPress Form Builder to create, style and embed multiple forms of any complexity <= 2.5.2 - Cross-Site Request Forgery to Survey Renaming CWE-352 4.3 Medium2026-01-24
CVE-2025-13139 SurveyJS: Drag & Drop WordPress Form Builder <= 2.5.2 - Cross-Site Request Forgery to Survey Creation CWE-352 4.3 Medium2026-01-24
CVE-2025-13140 SurveyJS: Drag & Drop WordPress Form Builder <= 1.12.20 - Cross-Site Request Forgery to Survey Deletion CWE-352 4.3 Medium2025-12-02
CVE-2025-3815 SurveyJS <= 1.12.32 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter CWE-79 6.4 Medium2025-05-03
CVE-2024-12544 SurveyJS: Drag & Drop WordPress Form Builder to create, style and embed multiple forms of any complexity <= 1.12.17 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Deletion via SurveyJS_DeleteFile CWE-862 8.8 High2025-03-01

All 7 known CVE vulnerabilities affecting SurveyJS: Drag & Drop Form Builder with full Chinese analysis, references, and POCs where available.