WordSurvey
WordSurvey has one disclosed vulnerability in the WordSec catalog, all reported in 2024; it remains unpatched as of October 2026. Their average CVSS score is 5.5, and the most serious one scores 5.5 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for WordSurvey has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2024.
All of these findings were reported by Artem Polynko (Artem Polynko). The current release is tested up to WordPress 7.1.3.
CVE-2024-6767WordSurvey <= 3.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via sounding_title Parameter
Read the full analysisVulnerability Records
WordSurvey
Author
sersis
This plugin allows you to create complete surveys, publish surveys with a shortcode and view survey results in the admin backend. You can also see the statistics of your voting poll. Features Publish your survey on pages or posts by including a shortcode. View results of your surveys (statistics) in the admin area of your WordPress site. Contextual help available for many of the survey builder options Export the statistics in PDF format PRO version You can more: 1. Create more surveys 2. Duplicate survey 3. Choose whether to show the title of the survey or not for each survey 4. Choose the size that the title must have for each survey 5. Choose the color of the button to vote 6. Export statistics of your surveys also in CSV and XLS format Visit our website to download the PRO Version! Requirements PHP 7.1 or later (PHP 8 supported). WordPress 4.6 or later.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C