CVE-2017-1002022

9.8 criticalEPSS 3.6%

Critical (9.8) in surveys project surveys. EPSS 3.6% chance of exploitation in the next 30 days.

Vulnerability in wordpress plugin surveys v1.01.8, The code in questions.php does not sanitize the survey variable before placing it inside of an SQL query.

Severity

CVSS 3.0

9.8 critical

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 3.6% chance of exploitation in the next 30 days; higher than 89% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2017-09-14
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

surveys_project:surveys

References

http://www.vapidlabs.com/advisory.php?v=193
https://wordpress.org/plugins/surveys/
https://wpvulndb.com/vulnerabilities/8833
http://www.vapidlabs.com/advisory.php?v=193
https://wordpress.org/plugins/surveys/

Check your stack JSON