CVE-2025-32275: medium-severity vulnerability in Ays Pro Survey Maker
WordPress Survey Maker plugin <= 5.1.6.3 - Bypass vulnerability
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 4.3epss 0.3%
Authentication Bypass by Spoofing vulnerability in Ays Pro Survey Maker survey-maker allows Identity Spoofing.This issue affects Survey Maker: from n/a through <= 5.1.6.3.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Affected products
Ays Pro · Survey MakerRelated CVEs — Ays Pro Survey Maker
In the same product, most dangerous first.
CVE-2021-24459—Survey Maker < 1.5.6 - Authenticated Blind SQL InjectionsEPSS 1.4%CVE-2025-48095MEDIUMWordPress Survey Maker plugin <= 5.1.8.8 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2024-50426MEDIUMWordPress Survey Maker plugin <= 5.0.2 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2025-64276MEDIUMWordPress Survey Maker plugin <= 5.1.9.4 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-65565HIGHWordPress Survey Maker plugin <= 5.2.3.3 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-57361HIGHWordPress Survey Maker plugin <= 5.2.2.5 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%