CVE-2023-23490: Ays-Pro Survey Maker

High severity, CVSS 8.8. EPSS: 2.3% chance of exploitation in the next 30 days.

The Survey Maker WordPress Plugin, version < 3.1.2, is affected by an authenticated SQL injection vulnerability in the 'surveys_ids' parameter of its 'ays_surveys_export_json' action.

Affected products

• Ays-Pro Survey Maker: before 3.1.2 (fixed in 3.1.2)

Published 2023-01-20. Last modified 2026-06-17.