CVE-2026-5626

Name of the Vulnerable Software and Affected Versions Survey Form Block versions prior to 1.0.2

Description The Survey Form Block plugin for WordPress allows unauthorized data access because the get all data() function lacks a capability check. Authenticated users with Subscriber-level permissions or higher can exploit this to export all survey submission data and column metadata.

Recommendations Update the plugin to a version newer than 1.0.1. As a temporary mitigation, restrict access to the get all data() function.