Devsoftbaltic

11 CVEs across 3 Devsoftbaltic products. Browse Devsoftbaltic vulnerabilities, severities, and proof-of-concept exploits.

Devsoftbaltic products with known CVEs

ProductCVEs
Surveyjs: Drag & Drop Form Builder7
Surveyjs3
Survey-Creator1
Devsoftbaltic CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-2440High7.22026-03-21The SurveyJS plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 2.5.3 via survey result submissions. This…
CVE-2025-13205Medium4.32026-01-24The SurveyJS: Drag & Drop WordPress Form Builder to create, style and embed multiple forms of any complexity plugin for WordPress is vulnerable to Cross-Site R…
CVE-2025-13194Medium4.32026-01-24The SurveyJS: Drag & Drop WordPress Form Builder to create, style and embed multiple forms of any complexity plugin for WordPress is vulnerable to Cross-Site R…
CVE-2025-13139Medium4.32026-01-24The SurveyJS: Drag & Drop WordPress Form Builder plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.5.2…
CVE-2025-13140Medium4.32025-12-02The SurveyJS: Drag & Drop WordPress Form Builder plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.12.20…
CVE-2025-3815Medium6.42025-05-03The SurveyJS plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ parameter in all versions up to, and including, 1.12.32 due to insu…
CVE-2025-32256Medium5.32025-04-04Missing Authorization vulnerability in devsoftbaltic SurveyJS surveyjs allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Surve…
CVE-2025-32167Medium6.52025-04-04Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in devsoftbaltic SurveyJS surveyjs allows Stored XSS.This is…
CVE-2024-12544High8.82025-03-01The SurveyJS: Drag & Drop WordPress Form Builder to create, style and embed multiple forms of any complexity plugin for WordPress is vulnerable to arbitrary fi…
CVE-2024-50427Critical9.92024-10-29Unrestricted Upload of File with Dangerous Type vulnerability in devsoftbaltic SurveyJS surveyjs.This issue affects SurveyJS: from n/a through <= 1.9.136.
CVE-2024-28635Medium6.12024-03-21Cross Site Scripting (XSS) vulnerability in SurveyJS Survey Creator v.1.9.132 and before, allows attackers to execute arbitrary code and obtain sensitive infor…