SurveyFunnel WordPress Plugin Sensitive Information Exposure Vulnerability
Vulnerability
A vulnerability allowing sensitive information exposure has been identified in the SurveyFunnel – Survey Plugin for WordPress, affecting all versions through 1.1.5. The issue arises from several unprotected REST API endpoints that allow unauthenticated attackers to access sensitive data from survey responses.
Impact
Exploitation of this vulnerability could lead to unauthorized access to sensitive survey response data.
Added: Dec 5, 2025, 5:25 AM
Updated: Dec 5, 2025, 5:25 AM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
2.5exploitability
8.1remediation
0.0relevance
1.4threat
3.2urgency
2.9incentive
5.8Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.