Modal Survey - WordPress Poll, Survey & Quiz Plugin

Modal Survey - WordPress Poll, Survey & Quiz Plugin has 4 disclosed vulnerabilities in the WordSec catalog, reported between 2025 and 2026; none of them are fixed as of September 2026. Their average CVSS score is 6.9, and the most serious one scores 9.8 out of 10. Severity breakdown: 1 critical and 1 high. 2025 was the busiest year with 3 disclosures.

The most common weakness is Authorization Bypass Through User-Controlled Key, behind 1 of the records (25%). Other recurring categories include Cross-Site Scripting, PHP Remote File Inclusion.

None of the 4 issues recorded for Modal Survey - WordPress Poll, Survey & Quiz Plugin have a published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.

2 independent researchers contributed these findings, most of them (3) reported by Bonds.

Strategic Overview

Avg CVSSMedium

6.9/ 10

Patch Coverage0%

Open

Fixed

Get automatic notifications for all Modal Survey - WordPress Poll, Survey & Quiz Plugin vulnerabilities before they are exploited.

Most severe open issueCVSS 9.8CVE-2025-39468

Modal Survey <= 2.0.2.0.1 - Unauthenticated Local File Inclusion

Read the full analysis

Vulnerability Records

4 records


2026-08-18 00:00	Modal Survey - WordPress Poll, Survey & Quiz Plugin <= 2.0.2.2.3 - Authenticated (Subscriber+) Insecure Direct Object Reference Modal Survey - WordPress Poll <= 2.0.2.2.3	`CVE-2026-66634`	4.3 Medium	luc	No
2025-04-17 00:00	Modal Survey <= 2.0.2.0.1 - Reflected Cross-Site Scripting Modal Survey - WordPress Poll <= 2.0.2.0.1	`CVE-2025-39469`	6.1 Medium	Bonds	No
2025-04-16 00:00	Modal Survey <= 2.0.2.0.1 - Unauthenticated SQL Injection Modal Survey - WordPress Poll <= 2.0.2.0.1	`CVE-2025-39471`	7.5 High	Bonds	No
2025-04-16 00:00	Modal Survey <= 2.0.2.0.1 - Unauthenticated Local File Inclusion Modal Survey - WordPress Poll <= 2.0.2.0.1	`CVE-2025-39468`	9.8 Critical	Bonds	No

Showing 1–4 of 4 reports