Cross Site Scripting Vulnerability in Survey Maker by WordPress
CVE-2026-65565

7.1HIGH

Key Information:

Vendor

WordPress
Status
Survey Maker
Vendor
CVE Published:
6 August 2026

What is CVE-2026-65565?

The Survey Maker plugin for WordPress, specifically versions up to and including 5.2.3.3, is susceptible to an unauthenticated Cross Site Scripting (XSS) vulnerability. This issue allows attackers to inject malicious scripts into web pages viewed by users. If exploited, it could lead to unauthorized access to sensitive information or the execution of harmful operations on behalf of unsuspecting users. Website administrators must address this vulnerability to ensure the security and integrity of their sites.

Affected Version(s)

Survey Maker <= 5.2.3.3

References

https://patchstack.com/database/wordpress/plugin/survey-m...
vdb-entry

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

LevinityCyber | Patchstack Bug Bounty Program
.