PatchTheCVEgetperfectsurvey vulnerabilities
Recent CVEs affecting getperfectsurvey products. 4 tracked.
getperfectsurvey has 4 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 4. Most recent: 2022-02-01. Highest priority: CVE-2021-24762 (score 69/100).
- CVE-2021-24765 MEDIUM 6.1 UPGRADE The Perfect Survey WordPress plugin through 1.5.2 does not validate and escape the X-Forwarded-For header valu
- CVE-2021-24764 MEDIUM 6.1 UPGRADE The Perfect Survey WordPress plugin before 1.5.2 does not sanitise and escape multiple parameters (id and filt
- CVE-2021-24763 HIGH 8.8 UPGRADE The Perfect Survey WordPress plugin before 1.5.2 does not have proper authorisation nor CSRF checks in the sav
- CVE-2021-24762 CRITICAL 9.8 UPGRADE The Perfect Survey WordPress plugin before 1.5.2 does not validate and escape the question_id GET parameter be
FAQ
How do I fix getperfectsurvey vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is getperfectsurvey being exploited right now?
None of the tracked getperfectsurvey CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which getperfectsurvey CVE should I patch first?
CVE-2021-24762 currently ranks highest (69/100): The Perfect Survey WordPress plugin before 1.5.2 does not validate and escape the question_id GET parameter be.