SurveyJS: Drag & Drop WordPress Form Builder to create, style and embed multiple forms of any complexity, CVE-2025-32256

CVE, Research URL: CVE-2025-32256
Home page URL: Security reports for SurveyJS: Drag & Drop WordPress Form Builder to create, style and embed multiple forms of any complexity
Application: SurveyJS: Drag & Drop WordPress Form Builder to create, style and embed multiple forms of any complexity
Published on: Apr 04, 2025
Research Description: Missing Authorization vulnerability in devsoftbaltic SurveyJS allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects SurveyJS: from n/a through 1.12.20.
Affected versions: Min -, max 1.12.20.
Status: vulnerable

SurveyJS: Drag &amp; Drop WordPress Form Builder to create, style and embed multiple forms of any complexity, CVE-2025-32256