← WordPress Vulnerabilities
WordPress security by component

SurveyJS: Drag & Drop WordPress Form Builder to create, style and embed multiple forms of any complexity

SurveyJS: Drag & Drop WordPress Form Builder to create, style and embed multiple forms of any complexity is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Mar 01, 2025; the highest CVE/CNA score is 8.8.

Plugin slug: form-builder-to-create-style-and-embed-multiple-forms-of-any-complexity

CVE-2024-12544: SurveyJS: Drag & Drop WordPress Form Builder to create, style and embed multiple forms of any complexity: Code execution

SurveyJS: Drag & Drop WordPress Form Builder to create, style and embed multiple forms of any complexity is affected by code execution. Exploitation requires at least subscriber-level access. Successful exploitation can run attacker-controlled code in the WordPress hosting account.

PublishedMar 01, 2025
Safe version guidanceSee mitigation notes
Safe version
Mar 01, 2025 CVE-2024-12544
SurveyJS: Drag & Drop WordPress Form Builder to create, style and embed multiple forms of any complexity: Code execution
SurveyJS: Drag & Drop WordPress Form Builder to create, style and embed multiple forms of any complexity is affected by code execution. Exploitation requires at least subscriber-level access. Successful exploitation can run attacker-controlled code in the WordPress hosting account.
See mitigation notes
CVE8.8
NVDPending