Vulnerabilities in devsoftbaltic
10 resultsCVE-2024-50427CRITICALWordPress SurveyJS plugin <= 1.9.136 - Arbitrary File Upload vulnerabilityEPSS 1.0%CVE-2024-12544HIGHSurveyJS: Drag & Drop WordPress Form Builder to create, style and embed multiple forms of any complexity <= 1.12.17 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Deletion via SurveyJS_DeleteFileEPSS 0.7%CVE-2025-32167MEDIUMWordPress SurveyJS plugin <= 1.12.20 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2025-32256MEDIUMWordPress SurveyJS plugin <= 1.12.20 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-2440HIGHSurveyJS: Drag & Drop Form Builder <= 2.5.3 - Unauthenticated Stored Cross-Site ScriptingEPSS 0.3%CVE-2025-3815MEDIUMSurveyJS <= 1.12.32 - Authenticated (Contributor+) Stored Cross-Site Scripting via id ParameterEPSS 0.2%CVE-2025-13194MEDIUMSurveyJS: Drag & Drop WordPress Form Builder to create, style and embed multiple forms of any complexity <= 2.5.2 - Cross-Site Request Forgery to Survey RenamingEPSS 0.1%CVE-2025-13205MEDIUMSurveyJS: Drag & Drop WordPress Form Builder to create, style and embed multiple forms of any complexity <= 2.5.2 - Cross-Site Request Forgery to Survey CloningEPSS 0.1%CVE-2025-13139MEDIUMSurveyJS: Drag & Drop WordPress Form Builder <= 2.5.2 - Cross-Site Request Forgery to Survey CreationEPSS 0.1%CVE-2025-13140MEDIUMSurveyJS: Drag & Drop WordPress Form Builder <= 1.12.20 - Cross-Site Request Forgery to Survey DeletionEPSS 0.1%