PatchTheCVEperfect survey vulnerabilities and fixes
Recent CVEs affecting perfect survey, with upgrade or downgrade steps. 4 tracked.
Also searched as: perfectsurvey.
perfect survey has 4 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 4. Most recent: 2022-02-01. Highest priority: CVE-2021-24762 (score 69/100).
- CVE-2021-24765 MEDIUM 6.1 UPGRADE The Perfect Survey WordPress plugin through 1.5.2 does not validate and escape the X-Forwarded-For header valu
- CVE-2021-24764 MEDIUM 6.1 UPGRADE The Perfect Survey WordPress plugin before 1.5.2 does not sanitise and escape multiple parameters (id and filt
- CVE-2021-24763 HIGH 8.8 UPGRADE The Perfect Survey WordPress plugin before 1.5.2 does not have proper authorisation nor CSRF checks in the sav
- CVE-2021-24762 CRITICAL 9.8 UPGRADE The Perfect Survey WordPress plugin before 1.5.2 does not validate and escape the question_id GET parameter be
FAQ
How do I fix perfect survey vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is perfect survey being exploited right now?
None of the tracked perfect survey CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which perfect survey CVE should I patch first?
CVE-2021-24762 currently ranks highest (69/100): The Perfect Survey WordPress plugin before 1.5.2 does not validate and escape the question_id GET parameter be.