Skip to content
SurveyKing 1.12.0-1.13.2 Vulnerabilities Expose User Data

SurveyKing 1.12.0-1.13.2 Vulnerabilities Expose User Data

First seen 14 Nov 2026, 17:12 UTC •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 14, 2026 at 17:12 UTC
  • •SurveyKing versions 1.12.0 to 1.13.2 are vulnerable to two critical flaws.
  • •Authorization bypass and unauthenticated data disclosure could expose sensitive information.
  • •No active exploitation has been confirmed, but immediate patching is recommended.

SurveyKing versions 1.12.0 through 1.13.2 are affected by two significant vulnerabilities: an authorization bypass via linked survey IDs and unauthenticated survey response disclosures through result lookups. These flaws could allow unauthorized users to access sensitive survey data. The vulnerabilities are categorized under CWE-639 and are present in the SurveyKing software used for conducting surveys. Current reports indicate that no has been confirmed, but the vulnerabilities are serious enough to warrant immediate attention. Users are advised to prioritize patching to mitigate potential risks. The vendor has not yet released a patch for these vulnerabilities.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 7h ago How this analysis works

Timeline

2026-11-14
Vulnerabilities disclosed
SurveyKing vulnerabilities affecting versions 1.12.0 to 1.13.2 were publicly disclosed today.
VulnCheck
2026-11-14
Second vulnerability disclosed
An additional vulnerability allowing unauthenticated survey response disclosures was also disclosed today.
VulnCheck

More articles in this cluster (2)

Extracted Entities (3)

1 / 3

Common questions

Which versions are affected?
SurveyKing versions 1.12.0 through 1.13.2 are affected by these vulnerabilities.
Is there a patch available?
No, the vendor has not released a patch for these vulnerabilities yet.
What should I do to protect my data?
Monitor for updates from the vendor and consider restricting access to sensitive surveys until a patch is available.