Medium · 4.7 CVE-2021-26256 EUVD-2021-13073GHSA-2h38-3p2h-p683

WordPress Survey Maker plugin <= 2.0.6 - Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability

Published Feb 21, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability discovered in Survey Maker WordPress plugin (versions <= 2.0.6).

Vendor	Product	Affected	Fixed
Survey Maker team	Survey Maker (WordPress plugin)	<= 2.0.6 – ≤ 2.0.6	—