Advisories · Technology

Pantherius Modal Survey.

Every CVE that names Pantherius Modal Survey among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-66634 CVE record

CVSS 4.3 Medium

WordPress Modal Survey plugin <= 2.0.2.2.3 - Insecure Direct Object References (IDOR) vulnerability
- Pantherius Modal Survey
- Broken access control
Not analysed yet 18 Aug 2026
CVE-2025-39468 CVE record

CVSS 8.1 High

WordPress Modal Survey plugin <= 2.0.2.0.1 - Local File Inclusion vulnerability
- pantherius Modal Survey
- File inclusion
Not analysed yet 6 Nov 2025
CVE-2025-39469 CVE record

CVSS 7.1 High

WordPress Modal Survey plugin <= 2.0.2.0.1 - Cross Site Scripting (XSS) vulnerability
- pantherius Modal Survey
- Cross-site scripting (XSS)
Not analysed yet 18 Apr 2025
CVE-2025-39471 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

WordPress Modal Survey plugin <= 2.0.2.0.1 - SQL Injection vulnerability
- pantherius Modal Survey
- SQL injection
Not analysed yet 18 Apr 2025