Not rated
CVE-2021-24459 The get_results() and get_items() functions in the Survey Maker WordPress plugin before 1.5.6 did not use whitelist or…
Description
The get_results() and get_items() functions in the Survey Maker WordPress plugin before 1.5.6 did not use whitelist or validate the orderby parameter before using it in SQL statements passed to the get_results() DB calls, leading to SQL injection issues in the admin dashboard
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Survey Maker 1.5 | earliest → < 1.5.6 | 1.5.6 |
Other CVEs of Survey Maker
The 10 CVEs of Survey Maker →
CVE-2026-65565
Unauthenticated Cross Site Scripting (XSS) in Survey Maker <= 5.2.3.3 versions
7.1
High
CVE-2026-57361
Unauthenticated Cross Site Scripting (XSS) in Survey Maker <= 5.2.2.5 versions
7.1
High
CVE-2026-26370
WordPress Plugin "Survey Maker" versions 5.1.7.7 and prior contain a cross-site scripting vulnerability
6.1
Medium
CVE-2025-64276
Missing Authorization vulnerability in Ays Pro Survey Maker survey-maker allows Exploiting Incorrectly Configured Access…
6.5
Medium