Devsoftbaltic
10 CVEs across 3 Devsoftbaltic products. Browse Devsoftbaltic vulnerabilities, severities, and proof-of-concept exploits.
Devsoftbaltic products with known CVEs
Devsoftbaltic CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2026-2440 | High | 7.2 | 2026-03-21 | The SurveyJS plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 2.5.3 via survey result submissions. This… |
CVE-2025-13205 | Medium | 4.3 | 2026-01-24 | The SurveyJS: Drag & Drop WordPress Form Builder to create, style and embed multiple forms of any complexity plugin for WordPress is vulnerable to Cross-Site R… |
CVE-2025-13194 | Medium | 4.3 | 2026-01-24 | The SurveyJS: Drag & Drop WordPress Form Builder to create, style and embed multiple forms of any complexity plugin for WordPress is vulnerable to Cross-Site R… |
CVE-2025-13139 | Medium | 4.3 | 2026-01-24 | The SurveyJS: Drag & Drop WordPress Form Builder plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.5.2… |
CVE-2025-13140 | Medium | 4.3 | 2025-12-02 | The SurveyJS: Drag & Drop WordPress Form Builder plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.12.20… |
CVE-2025-3815 | Medium | 6.4 | 2025-05-03 | The SurveyJS plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ parameter in all versions up to, and including, 1.12.32 due to insu… |
CVE-2025-32256 | Medium | 5.3 | 2025-04-04 | Missing Authorization vulnerability in devsoftbaltic SurveyJS surveyjs allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Surve… |
CVE-2025-32167 | Medium | 6.5 | 2025-04-04 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in devsoftbaltic SurveyJS surveyjs allows Stored XSS.This is… |
CVE-2024-12544 | High | 8.8 | 2025-03-01 | The SurveyJS: Drag & Drop WordPress Form Builder to create, style and embed multiple forms of any complexity plugin for WordPress is vulnerable to arbitrary fi… |
CVE-2024-50427 | Critical | 9.9 | 2024-10-29 | Unrestricted Upload of File with Dangerous Type vulnerability in devsoftbaltic SurveyJS surveyjs.This issue affects SurveyJS: from n/a through <= 1.9.136. |
CVE-2024-28635 | Medium | 6.1 | 2024-03-21 | Cross Site Scripting (XSS) vulnerability in SurveyJS Survey Creator v.1.9.132 and before, allows attackers to execute arbitrary code and obtain sensitive infor… |