Lucene search
K

3938 matches found

Vulnrichment
Vulnrichment
added 2025/11/13 9:24 a.m.4 views

CVE-2025-64276 WordPress Survey Maker plugin <= 5.1.9.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in Ays Pro Survey Maker survey-maker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Survey Maker: from n/a through = 5.1.9.4...

6.5CVSS6.4AI score0.00208EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/11/13 9:24 a.m.6 views

CVE-2025-64276 WordPress Survey Maker plugin <= 5.1.9.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in Ays Pro Survey Maker survey-maker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Survey Maker: from n/a through = 5.1.9.4...

6.5CVSS0.00208EPSS
Exploits0References1
EUVD
EUVD
added 2025/11/13 6:30 a.m.3 views

EUVD-2025-150404

The Survey Maker plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'ayssurveyshowresults' AJAX endpoint in all versions up to, and including, 5.1.9.4. This makes it possible for unauthenticated attackers to view all survey submissions...

5.3CVSS4.8AI score0.00208EPSS
Exploits0References3
NVD
NVD
added 2025/11/13 5:16 a.m.2 views

CVE-2025-12891

The Survey Maker plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'ayssurveyshowresults' AJAX endpoint in all versions up to, and including, 5.1.9.4. This makes it possible for unauthenticated attackers to view all survey submissions...

5.3CVSS0.00208EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/11/13 4:28 a.m.6 views

CVE-2025-12891 Survey Maker <= 5.1.9.4 - Missing Authorization to Unauthenticated Information Exposure

The Survey Maker plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'ayssurveyshowresults' AJAX endpoint in all versions up to, and including, 5.1.9.4. This makes it possible for unauthenticated attackers to view all survey submissions...

5.3CVSS0.00208EPSS
Exploits0References2
CVE
CVE
added 2025/11/13 4:28 a.m.16 views

CVE-2025-12891

The CVE-2025-12891 entry concerns the WordPress Survey Maker plugin, where a missing capability check on the ays_survey_show_results AJAX endpoint allows unauthorized access to survey submissions. Affected versions are up to and including 5.1.9.4. The vulnerability enables unauthenticated attacke...

5.3CVSS4.9AI score0.00208EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/11/13 4:28 a.m.5 views

CVE-2025-12891 Survey Maker <= 5.1.9.4 - Missing Authorization to Unauthenticated Information Exposure

The Survey Maker plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'ayssurveyshowresults' AJAX endpoint in all versions up to, and including, 5.1.9.4. This makes it possible for unauthenticated attackers to view all survey submissions...

5.3CVSS4.8AI score0.00208EPSS
Exploits0References2
NVD
NVD
added 2025/11/13 4:15 a.m.10 views

CVE-2025-12892

The Survey Maker plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the deactivatepluginoption function in all versions up to, and including, 5.1.9.4. This makes it possible for unauthenticated attackers to update the...

5.3CVSS0.00196EPSS
Exploits0References2
CVE
CVE
added 2025/11/13 3:27 a.m.16 views

CVE-2025-12892

The WordPress plugin Survey Maker is affected up to version 5.1.9.4 due to a missing capability check in the deactivate_plugin_option function, enabling unauthenticated modification of data by updating the ays_survey_maker_upgrade_plugin option. This creates a risk of unauthorized configuration c...

5.3CVSS4.9AI score0.00196EPSS
Exploits0References2
EUVD
EUVD
added 2025/11/13 3:27 a.m.3 views

EUVD-2025-150408

The Survey Maker plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the deactivatepluginoption function in all versions up to, and including, 5.1.9.4. This makes it possible for unauthenticated attackers to update the...

5.3CVSS4.9AI score0.00196EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/11/13 3:27 a.m.4 views

CVE-2025-12892 Survey Maker <= 5.1.9.4 - Missing Authorization Unauthenticated Limited Option Update

The Survey Maker plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the deactivatepluginoption function in all versions up to, and including, 5.1.9.4. This makes it possible for unauthenticated attackers to update the...

5.3CVSS4.9AI score0.00196EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/11/13 3:27 a.m.7 views

CVE-2025-12892 Survey Maker <= 5.1.9.4 - Missing Authorization to Unauthenticated Limited Option Update

The Survey Maker plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the deactivatepluginoption function in all versions up to, and including, 5.1.9.4. This makes it possible for unauthenticated attackers to update the...

5.3CVSS0.00196EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/11/13 12:0 a.m.7 views

WordPress plugin Survey Maker 安全漏洞

WordPress Survey Maker plugin is a tool for creating questionnaires with support for multiple question types and data analysis features for businesses or individuals to collect user feedback. A lack of authorization vulnerability exists in WordPress Survey Maker plugin, which can be exploited by ...

6.5CVSS6.5AI score0.00208EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/11/13 12:0 a.m.9 views

PT-2025-46781

Name of the Vulnerable Software and Affected Versions Survey Maker plugin for WordPress versions up to and including 5.1.9.4 Description The software is susceptible to unauthorized data modification. This is due to a missing capability check within the deactivate plugin option function. This allo...

5.3CVSS6.1AI score0.00196EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2025/11/13 12:0 a.m.3 views

PT-2025-46783

Name of the Vulnerable Software and Affected Versions Survey Maker plugin for WordPress versions up to and including 5.1.9.4 Description The software is susceptible to unauthorized data access. This is due to a missing capability check on the ays survey show results API endpoint. This allows...

5.3CVSS6AI score0.00208EPSS
Exploits0References6
CNNVD
CNNVD
added 2025/11/13 12:0 a.m.3 views

WordPress plugin Survey Maker 安全漏洞

WordPress Survey Maker plugin is a tool for creating questionnaires with support for multiple question types and data analysis features for businesses or individuals to collect user feedback. WordPress Survey Maker plugin suffers from a missing capability check vulnerability, which stems from a...

5.3CVSS6.3AI score0.00196EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/11/13 12:0 a.m.1 views

WordPress plugin Survey Maker 安全漏洞

WordPress Survey Maker plugin is a tool for creating questionnaires with support for multiple question types and data analysis features for businesses or individuals to collect user feedback. An unauthorized access vulnerability exists in the WordPress Survey Maker plugin, which stems from a lack...

5.3CVSS6.3AI score0.00208EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/11/13 12:0 a.m.5 views

PT-2025-46807

Name of the Vulnerable Software and Affected Versions Ays Pro Survey Maker versions through 5.1.9.4 Description Ays Pro Survey Maker survey-maker is affected by a missing authorization issue, allowing exploitation of incorrectly configured access control security levels. Recommendations Update Ay...

6.5AI score0.00208EPSS
Exploits0References3
Patchstack
Patchstack
added 2025/11/12 11:29 p.m.4 views

WordPress Survey Maker plugin <= 5.1.9.4 - Missing Authorization to Unauthenticated Information Exposure vulnerability

Missing Authorization to Unauthenticated Information Exposure vulnerability discovered by DityaRA in WordPress Plugin Survey Maker versions = 5.1.9.4...

5.3CVSS6.6AI score0.00208EPSS
Exploits0References1Affected Software1
OSV
OSV
added 2025/11/12 8:15 p.m.2 views

CVE-2025-13060

A security vulnerability has been detected in SourceCodester Survey Application System 1.0. This affects an unknown function of the file /viewsurvey.php. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit has been disclosed publicly and m...

9.8CVSS5.8AI score
Exploits0References5
Rows per page
Query Builder