CVE-2026-65565: WordPress Survey Maker plugin <= 5.2.3.3 - Cross Site Scripting (XSS) vulnerability

Published Aug 6, 2026

Updated

Unauthenticated Cross Site Scripting (XSS) in Survey Maker <= 5.2.3.3 versions.

Affected Software

1 affected component

WordPress Survey Maker<=5.2.3.3

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade WordPress Survey Maker Plugin to a version that resolves this vulnerability.
Fixed in 5.2.3.4

Aug 6, 2026

CVE Published

via MITRE·02:27 PM

Data Sourced

via MITRE·02:27 PM

RemedyDescriptionSeverityWeakness

CVE-2026-65565 has a severity rating of high, specifically a score of 7.1.

To fix CVE-2026-65565, update the WordPress Survey Maker plugin to version 5.2.3.4 or later.

CVE-2026-65565 is classified as a Cross Site Scripting (XSS) vulnerability.

CVE-2026-65565 affects all versions of the Survey Maker plugin up to and including 5.2.3.3.

Yes, CVE-2026-65565 can be exploited by unauthenticated users.