CVE-2026-66634

MediumCVSS 4.3

Published: 18/08/2026(UTC)Updated: 20/08/2026(UTC)Translated: 18/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.26%

18th percentile - higher than 18% of all known CVEs

Summary

Insecure Direct Object References (IDOR) vulnerability in Modal Survey in versions up to 2.0.2.2.3. A user with Subscriber role can access unauthorized resources.

Risk Assessment

An attacker can access sensitive data or functions they should not have permission to, which can lead to privacy breach.

Recommendation

Update the plugin to the latest version that includes the security fix.

Original NVD description (English source)

Subscriber Insecure Direct Object References (IDOR) in Modal Survey <= 2.0.2.2.3 versions.