What’s Vulnerable › Products

devsoftbaltic SurveyJS: Drag & Drop Form Builder vulnerabilities

7 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 7 published in the last 12 months.

Check whether your devsoftbaltic SurveyJS: Drag & Drop Form Builder version is affected

Latest devsoftbaltic SurveyJS: Drag & Drop Form Builder vulnerabilities

• CVE-2026-2440 — SurveyJS: Drag & Drop Form Builder <= 2.5.3 - Unauthenticated Stored Cross-Site Scripting (CVSS 7.2)
• CVE-2025-13205 — SurveyJS: Drag & Drop WordPress Form Builder to create, style and embed multiple forms of any complexity <= 2.5.2 - Cross-Site Request Forgery to Survey Cloning (CVSS 4.3)
• CVE-2025-13194 — SurveyJS: Drag & Drop WordPress Form Builder to create, style and embed multiple forms of any complexity <= 2.5.2 - Cross-Site Request Forgery to Survey Renaming (CVSS 4.3)
• CVE-2025-13139 — SurveyJS: Drag & Drop WordPress Form Builder <= 2.5.2 - Cross-Site Request Forgery to Survey Creation (CVSS 4.3)
• CVE-2025-13140 — SurveyJS: Drag & Drop WordPress Form Builder <= 1.12.20 - Cross-Site Request Forgery to Survey Deletion (CVSS 4.3)
• CVE-2025-3815 — SurveyJS <= 1.12.32 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter (CVSS 6.4)
• CVE-2024-12544 — SurveyJS: Drag & Drop WordPress Form Builder to create, style and embed multiple forms of any complexity <= 1.12.17 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Deletion via SurveyJS_DeleteFile (CVSS 8.8)