Survey Maker by AYS

Vulnerabilities 26Slug survey-makerLatest version 5.2.2.2WordPress.org →

Minimum safe version

5.1.9.5

Update to 5.1.9.5 or later to address 25 fixable vulnerabilities

Latest available5.2.2.2 ✓⚠ 1 vulnerability has no fix
Medium 6.1 Unfixed
2026-02-20≤ 5.1.7.7

Cross‑Site Scripting in WordPress Survey Maker Plugin

CVEJVN
Medium 5.3
2025-11-13< 5.1.9.5

CVE-2025-12891

CVEWordfence
Medium 5.3
2025-11-13< 5.1.9.5

CVE-2025-12892

CVEWordfence
Medium 6.5
2025-11-14< 5.1.9.5

Survey Maker <= 5.1.9.4 - Missing Authorization

WordfenceCVE
Medium 5.5
2025-01-30< 5.1.3.4

WordPress Survey Maker Plugin <= 5.1.3.3 is vulnerable to Cross Site Scripting (XSS)

PatchstackCVEEUVDWordfence
Medium 5.3
2024-04-03< 4.1.0

CVE-2023-35764

CVE
Medium 6.1
2024-04-27< 3.6.4

Survey Maker – Best WordPress Survey Plugin <= 3.6.6 - Unauthenticated Stored Cross-Site Scripting

WordfenceWordfenceCVEJVN
Medium 6.1
2023-06-22< 3.4.7

WordPress Survey Maker Plugin < 3.4.7 is vulnerable to Cross Site Scripting (XSS)

PatchstackCVEWordfenceWPScan
N/A
2022-12-22< 3.1.2

Survey Maker – Best WordPress Survey Plugin <= 3.1.1 - Authenticated (Admin+) Stored Cross-Site Scripting

Wordfence
N/A
2022-12-23< 3.1.2

WordPress Survey Maker Plugin <= 3.1.1 is vulnerable to Cross Site Scripting (XSS)

Patchstack
N/A
2021-06-29< 1.5.6

Survey Maker – Best WordPress Survey Plugin <= 1.5.5 - Reflected Cross-Site Scripting

Wordfence
N/A
< 1.5.6

Multiple Plugins from AYS Pro - Reflected Cross-Site Scripting (XSS)

WPScan