CVE-2026-57361

HighCVSS 7.1

Published: 02/07/2026(UTC)Updated: 02/07/2026(UTC)Translated: 03/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.19%

9th percentile — higher than 9% of all known CVEs

Summary

The Survey Maker plugin for WordPress versions 5.2.2.5 and earlier contains an unauthenticated Cross Site Scripting (XSS) vulnerability. It allows a remote attacker to inject malicious script without requiring authentication.

Risk Assessment

The risk involves the execution of arbitrary JavaScript code in users' browsers, potentially leading to session theft, redirection to malicious sites, or theft of sensitive data.

Recommendation

It is recommended to immediately update the Survey Maker plugin to the latest available version that fixes this vulnerability. Also, regularly check for security updates for all WordPress plugins.

Original NVD description (English source)

Unauthenticated Cross Site Scripting (XSS) in Survey Maker <= 5.2.2.5 versions.