CVE-2026-26370

MEDIUM

WordPress Survey Maker <5.1.7.7 - XSS

Title source: llm
STIX 2.1

Description

WordPress Plugin "Survey Maker" versions 5.1.7.7 and prior contain a cross-site scripting vulnerability. If this vulnerability is exploited, an arbitrary script may be executed in the user's web browser.

References (2)

Core 2

Scores

CVSS v3 6.1
EPSS 0.0019
EPSS Percentile 9.2%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-79
Status published
Products (1)
Ays Pro/Survey Maker 5.1.7.7 and prior
Published Feb 20, 2026
Tracked Since Feb 20, 2026