Non notée
CVE-2021-24459 The get_results() and get_items() functions in the Survey Maker WordPress plugin before 1.5.6 did not use whitelist or…
Description
The get_results() and get_items() functions in the Survey Maker WordPress plugin before 1.5.6 did not use whitelist or validate the orderby parameter before using it in SQL statements passed to the get_results() DB calls, leading to SQL injection issues in the admin dashboard
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Survey Maker 1.5 | premières → < 1.5.6 | 1.5.6 |
Autres CVE de Survey Maker
Les 10 CVE de Survey Maker →
CVE-2026-65565
Unauthenticated Cross Site Scripting (XSS) in Survey Maker <= 5.2.3.3 versions
7.1
Élevée
CVE-2026-57361
Unauthenticated Cross Site Scripting (XSS) in Survey Maker <= 5.2.2.5 versions
7.1
Élevée
CVE-2026-26370
WordPress Plugin "Survey Maker" versions 5.1.7.7 and prior contain a cross-site scripting vulnerability
6.1
Moyenne
CVE-2025-64276
Missing Authorization vulnerability in Ays Pro Survey Maker survey-maker allows Exploiting Incorrectly Configured Access…
6.5
Moyenne