Known vulnerabilities in Survey Maker by AYS

Create free online surveys and get your visitors' feedbacks directly on your WordPress website with WordPress Survey Plugin

26Reported vulnerabilities

8.8Highest CVSS score

5.2.3.5Latest version

5,000+Active installs

What to do now

Update Survey Maker by AYS to 5.2.3.4 or later. 26 of these have a fixed version available. Updating resolves them.

Plugin last updated: August 6, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVE	Severity	Exploit probability next 30 days	Affected versions	Fixed in	Published
CVE-2023-23490	High 8.8	2.3%	Before 3.1.2	`3.1.2`	January 20, 2023
CVE-2021-24459	High 8.8	1.4%	Before 1.5.6	`1.5.6`	August 2, 2021
CVE-2023-0038	Medium 6.1	0.7%	3.1.3 and earlier	`3.1.4`	January 3, 2023
CVE-2021-26256	Medium 6.1	0.8%	2.0.6 and earlier	`2.0.7`	February 21, 2022
CVE-2023-2572	Medium 6.1	0.5%	Before 3.4.7	`3.4.7`	June 5, 2023
CVE-2024-4061	Medium 4.8	0.4%	Before 4.2.9	`4.2.9`	May 21, 2024
CVE-2026-57361	High 7.2	0.3%	5.2.2.5 and earlier	`5.2.2.6`	July 1, 2026
CVE-2023-34423	High 7.2	0.4%	3.6.3 and earlier	`3.6.4`	April 27, 2024
CVE-2026-65565	High 7.2	0.2%	5.2.3.3 and earlier	`5.2.3.4`	August 6, 2026
CVE-2025-48098	High 7.2	0.2%	5.1.8.8 and earlier	`5.1.8.9`	October 9, 2025
CVE-2024-29918	Medium 6.1	0.4%	4.0.6 and earlier	`4.0.7`	March 25, 2024
WF-b2594fcc-ae07-4f3f-a4fe-0c19524b0193	Medium 6.1	—	1.5.5 and earlier	`1.5.6`	June 29, 2021
CVE-2023-22697	Medium 5.3	0.6%	3.2.0 and earlier	`3.2.1`	January 27, 2023
WF-094c0952-4e28-4ed0-80ae-14fcf10cf2e1	Medium 5.5	—	3.1.1 and earlier	`3.1.2`	December 22, 2022
CVE-2025-12891	Medium 5.3	0.2%	0 to 5.1.9.4 (inclusive)	`5.1.9.5`	November 13, 2025
CVE-2025-12892	Medium 5.3	0.2%	0 to 5.1.9.4 (inclusive)	`5.1.9.5`	November 13, 2025
CVE-2025-32275	Medium 5.3	0.3%	5.1.6.3 and earlier	`5.1.6.4`	April 7, 2025
CVE-2023-35764	Medium 5.3	0.3%	4.0.9 and earlier	`4.1.0`	April 27, 2024
CVE-2026-26370	Medium 5.1	0.2%	Before 5.1.7.7	`5.1.7.7`	February 20, 2026
CVE-2024-13505	Medium 4.8	0.3%	Before 5.1.3.4	`5.1.3.4`	January 26, 2025
CVE-2024-8488	Medium 4.8	0.3%	Before 4.9.8	`4.9.8`	October 8, 2024
CVE-2025-48095	Medium 4.4	0.3%	5.1.8.8 and earlier	`5.1.8.9`	October 9, 2025
CVE-2024-50426	Medium 4.4	0.3%	5.0.2 and earlier	`5.0.3`	October 24, 2024
CVE-2024-27996	Medium 4.4	0.3%	4.0.5 and earlier	`4.0.6`	March 15, 2024
CVE-2025-64276	Medium 4.3	0.2%	5.1.9.4 and earlier	`5.1.9.5`	November 14, 2025
CVE-2025-22664	Medium 4.4	0.2%	5.1.3.5 and earlier	`5.1.3.6`	February 3, 2025

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.