CVE-2025-32275

CVE-2025-32275 is an authentication bypass in the WordPress plugin Survey Maker . The vulnerability is listed as an Unauthenticated Authorization Bypass affecting Survey Maker versions up to at least 5.1.5.7 (initial doc lists up to 5.1.5.4; Wordfence integration shows 5.1.5.7). The entry indicat...

CVE-2025-32275 WordPress Survey Maker plugin <= 5.1.6.3 - Bypass vulnerability

Authentication Bypass by Spoofing vulnerability in Ays Pro Survey Maker survey-maker allows Identity Spoofing.This issue affects Survey Maker: from n/a through = 5.1.6.3...

PT-2025-15961

Name of the Vulnerable Software and Affected Versions: Ays Pro Survey Maker versions n/d through 5.1.5.4 Description: The issue allows identity spoofing due to an authentication bypass by spoofing vulnerability. Recommendations: For versions n/d through 5.1.5.4, update to a version later than...

WordPress plugin Survey Maker has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

Moodle 4.0.x < 4.0.12 Multiple Vulnerabilities

According to its self-reported version, the Moodle install hosted on the remote host is prior to 3.9.25 / 3.11.x prior to 3.11.18 / 4.0.x prior to 4.0.12 / 4.1.x prior to 4.1.7 / 4.2.x prior to 4.2.4. It is, therefore, affected by multiple vulnerabilities: - XSS risk when manually running a task ...

Moodle 4.2.x < 4.2.4 Multiple Vulnerabilities

According to its self-reported version, the Moodle install hosted on the remote host is prior to 3.9.25 / 3.11.x prior to 3.11.18 / 4.0.x prior to 4.0.12 / 4.1.x prior to 4.1.7 / 4.2.x prior to 4.2.4. It is, therefore, affected by multiple vulnerabilities: - XSS risk when manually running a task ...

Moodle 4.1.x < 4.1.7 Multiple Vulnerabilities

According to its self-reported version, the Moodle install hosted on the remote host is prior to 3.9.25 / 3.11.x prior to 3.11.18 / 4.0.x prior to 4.0.12 / 4.1.x prior to 4.1.7 / 4.2.x prior to 4.2.4. It is, therefore, affected by multiple vulnerabilities: - XSS risk when manually running a task ...

Moodle 3.11.x < 3.11.18 Multiple Vulnerabilities

According to its self-reported version, the Moodle install hosted on the remote host is prior to 3.9.25 / 3.11.x prior to 3.11.18 / 4.0.x prior to 4.0.12 / 4.1.x prior to 4.1.7 / 4.2.x prior to 4.2.4. It is, therefore, affected by multiple vulnerabilities: - XSS risk when manually running a task ...

CVE-2025-32275: Authentication Bypass by Spoofing

Authentication Bypass by Spoofing vulnerability in Ays Pro Survey Maker survey-maker allows Identity Spoofing.This issue affects Survey Maker: from n/a through = 5.1.6.3...

WordPress Survey Maker plugin <= 5.1.6.3 - Bypass vulnerability

Bypass vulnerability discovered by astra.r3verii in WordPress Plugin Survey Maker versions = 5.1.6.3...

WordPress Quiz and Survey Master (QSM) plugin < 9.2.1 - Author+ Stored XSS vulnerability

Author+ Stored XSS vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin Quiz And Survey Master versions 9.2.1...

CVE-2024-10679 Quiz and Survey Master (QSM) < 9.2.1 - Author+ Stored XSS

The Quiz and Survey Master QSM WordPress plugin before 9.2.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2024-10679

The Quiz and Survey Master (QSM) WordPress plugin, in versions prior to 9.2.1 , is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the failure to properly sanitise and escape certain plugin settings. This vulnerability allows high-privilege users, such as administrators, to pe...

WordPress plugin Quiz and Survey Master (QSM) has security vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2025-12746

Name of the Vulnerable Software and Affected Versions The Quiz and Survey Master QSM WordPress plugin versions prior to 9.2.1 Description The issue allows high privilege users, such as admins, to perform Stored Cross-Site Scripting attacks. This is possible because the plugin does not properly...

CVE-2024-10679: Improper Neutralization of Input During Web Page Generation

The Quiz and Survey Master QSM WordPress plugin before 9.2.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2024-13666: Improper Input Validation

The Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder plugin for WordPress is vulnerable to IP Address Spoofing in all versions up to, and including, 5.2.12 due to insufficient IP address validation and use of user-supplied HTTP headers as a primary method for...

wifi: wcn36xx: fix channel survey memory allocation size

...

Malicious code in gss.survey.application (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 213760c83aa3e5576abe366dc9948b4e76fae43fde4241bb04aed016bdc1313c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2259 Malicious code in gss.survey.application (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 213760c83aa3e5576abe366dc9948b4e76fae43fde4241bb04aed016bdc1313c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...