Unauthorized Data Modification in Survey Maker Plugin for WordPress

CVE-2025-12892

What is CVE-2025-12892?

The Survey Maker plugin for WordPress is susceptible to unauthorized data modification due to a lack of capability checks in the deactivate_plugin_option() function. This vulnerability affects all versions up to and including 5.1.9.4, allowing unauthenticated attackers to alter the ays_survey_maker_upgrade_plugin option. Proper security measures need to be taken to ensure that only authorized users can make such alterations.

References