Modal Survey - Best WordPress Poll, Survey & Quiz Plugin

Modal Survey - Best WordPress Poll, Survey & Quiz Plugin v2.0.2.3.5 Nulled

No permission to download
Decryption key:


Modal Survey - Best WordPress Poll, Survey & Quiz Plugin v2.0.2.3.5 Nulled
2.0.2.3.5 - Bug Fix Release (2026-10-29)
Bug Fixes:
- Fixed the survey PDF export ("Export Charts" and "Export without Charts" in the Saved Surveys export menu) and all other survey exports (CSV, JSON, XML, XLS, TXT) doing nothing, with the browser console reporting "ReferenceError: export_survey is not defined". The export_survey() function in templates/assets/js/modal_survey_admin.js had been accidentally renamed to "questio", so every export button called a function that no longer existed. The function name has been restored. Personal (participant) exports were not affected.
- Fixed "TypeError: modalSurveyChart.generateLegend is not a function" when preparing charts for the PDF export. generateLegend() was removed in Chart.js v3, and the plugin ships Chart.js v4.5.1 (msChart.min.js). The color legend for each answer in the PDF is now built directly from the chart's own colors, so each answer in the PDF again shows a color swatch matching its slice in the chart.
Decryption key:


Modal Survey - Best WordPress Poll, Survey & Quiz Plugin v2.0.2.3.4 Nulled
2.0.2.3.4 - Bug Fix Release (2026-09-23)
Bug Fixes:
- Fixed a bug where the Participants admin page ("Votes" column) could show one participant with a wildly inflated vote count (e.g. 174) while unrelated, differently-named participants were missing entirely. The visitor-tracking cookie (ms-uid) is read on every survey submission and used to look up/create a row in the participants table via "WHERE id = ...". Whenever that cookie failed to reach the server for any reason (blocked by the browser/an extension, cleared, or the page load never set one because output had already started), the code used an empty string for this lookup. Since the id column isn't unique, every affected visitor's answers silently landed on whichever single existing row already had an empty id - merging many different real people's submissions into one innocent participant's record instead of creating their own. The participant lookup/creation now always uses a fresh, unique id when the cookie is missing, so each affected visitor gets their own record instead of colliding with someone else's.
- Hardened how the ms-uid tracking cookie's value is generated: it previously reused PHP's own session_id(), which is tied to a shorter-lived, unrelated session mechanism and could occasionally return the same value for different visitors. It's now a dedicated random token, and the plugin no longer starts a PHP session on every anonymous page view (which could also prevent full-page caching on pages containing a survey).
Decryption key:


Modal Survey - Best WordPress Poll, Survey & Quiz Plugin v2.0.2.3.3 Nulled
  • major compatibility improvements with PHP 8
  • minor code optimizations
Decryption key:


Modal Survey - Best WordPress Poll, Survey & Quiz Plugin v2.0.2.3.2 Nulled
2.0.2.3.2 - Bug Fix Release (2026-09-15)
Bug Fixes:
- Fixed a scoring/results accumulation bug where participant answer scores could become misaligned and add up incorrectly, and where the admin Participants page could show a "Undefined array key" PHP warning (modal_survey.php around the participants/scoring code, called from templates/settings_participants.php). Two parallel internal arrays used to reconstruct each participant's per-question answers and their associated score values were built out of step with each other whenever an answer's stored value was exactly "0" (a legitimate score/open-answer value): the code only added an entry to the values array when the value was "truthy", which in PHP treats "0" as false and skips it, while the corresponding entry was always added to the other array. This caused every subsequent value in that participant's list to line up with the wrong entry, corrupting totals and producing missing-index warnings. Both occurrences now always keep the two arrays in lock-step, regardless of whether the value is empty or zero.
- Fixed radar/pie/doughnut/polar/bar/line chart shortcodes ([survey_answers style="radarchart"], etc.) failing to render on the front end with browser console errors "Cannot read properties of undefined (reading 'register')" and "Cannot set properties of undefined (setting 'legend')". The shipped templates/assets/js/modal_survey_answer.min.js file was a stale, pre-Chart.js-v4 build that still called the old Chart.js v2 plugin registration API (Chart.pluginService.register), which no longer exists in the Chart.js v4.5.1 library bundled with the plugin (msChart.min.js). Sites running with default WordPress settings (SCRIPT_DEBUG off) load the .min.js file, so this broke chart rendering for every visitor regardless of caching, browser, or theme. The minified file has been regenerated from the current, Chart.js v4-compatible source (modal_survey_answer.js) and verified to initialize charts without error.
Decryption key:


Modal Survey - Best WordPress Poll, Survey & Quiz Plugin v2.0.2.3.1 Nulled
2.0.2.3.1 - Bug Fix Release (2026-09-12)
Bug Fixes:
- Fixed PHP warnings ("Trying to access array offset on value of type null" and "Uninitialized string offset 142") when rendering the [survey_answers]/[modalsurvey] shortcode on the front end. The grid-columns setting (options index 142) was being read from a raw character offset of the still-JSON-encoded options string instead of the decoded options array, which produced garbage/undefined results and warnings whenever the options string was shorter than 143 characters. The options are now decoded once into an array before any index is read.
- Fixed a critical bug where the entire Modal Survey admin screen could silently stop working: the Save button did nothing (no request was ever sent), and creating a new survey would hang and then create a bogus survey with ID 0. The admin JavaScript wrapped all of its button handlers in the deprecated jQuery(window).load(function(){...}) shorthand. In modern jQuery this is not treated as an event binding; jQuery.fn.load() unconditionally tries to read the first argument as a URL string (url.indexOf(" ")), and since a function was passed instead, this throws an immediate TypeError that aborts the entire script before any click handlers are registered. Replaced with the standards-compliant jQuery(window).on('load', function(){...}), which restores Save, Create Survey, and all other admin interactions.
Decryption key:


Modal Survey - Best WordPress Poll, Survey & Quiz Plugin v2.0.2.3.0 Nulled
PRO Version 2.0.3.8
  • major compatibility improvements with PHP 8
  • minor code optimizations
Decryption key:


Modal Survey - Best WordPress Poll, Survey & Quiz Plugin v2.0.2.2.9 Nulled
2.0.2.2.9 - Bug Fix Release (2026-08-15)
Bug Fixes:
- Fixed PHP warning "Attempt to read property 'display_name' on bool" appearing 22 times in the Saved Surveys list (settings_savedforms.php). When a survey's owner account has been deleted, get_user_by() returns false; the code now checks instanceof WP_User before accessing display_name, showing 'Unknown' as a fallback instead.
Decryption key:


Modal Survey - Best WordPress Poll, Survey & Quiz Plugin v2.0.2.2.5 Nulled
2.0.2.2.5 - Bug Fix Release (2026-07-01)
- Bug: Fixed critical regression where saving an existing survey deleted all its questions permanently. The save handler now validates the incoming question JSON before deleting existing data; if the payload is invalid the save is aborted with an error instead of wiping the survey.
- Bug: Fixed question and answer text being partially stripped on save. sanitize_text_field() (which removes HTML tags) was replaced with wp_kses_post() for question and answer content, preserving HTML formatting in quiz questions and answer labels.
Decryption key:


Modal Survey - Best WordPress Poll, Survey & Quiz Plugin v2.0.2.2.4 Nulled
2.0.2.2.4 - Security Release (2026-06-27)
Security Fixes (internal audit):
- Critical: Added current_user_can('manage_options') capability check to manual plugin updater; previously any WP user could trigger a plugin overwrite.
- Critical: Removed print_r($this->temp_path) debug statement disclosing the absolute server filesystem path on the Update admin page.
- Critical: Added version downgrade protection to manual updater; uploading an older plugin version is now rejected.
- Security: Added esc_html() around version strings and esc_html() around changelog content read from uploaded ZIP in the updater.
- Security: Changed throw_error() to use wp_kses_post() instead of raw echo.
- Security: Added ['allowed_classes' => false] + is_array() guard to all unserialize() calls on participant .custom field data in settings_participants.php, settings.php (send_admin_email, send_autoresponse), and all four export modules (csv, xls, txt, xml).
- Security: Added wp_verify_nonce() CSRF protection to all three participant delete operations (delete_samesession, delete_incomplete, bulk delete_participants).
- Security: Escaped survey name with esc_html() in settings_savedforms.php survey title output.
- Security: Wrapped all custom-field configuration properties ($cf->id, $cf->name, $cf->warning, $cf->minlength, $cf->position) with esc_attr() in the survey editor.
- Security: Replaced plugin_dir_path() server path disclosure in import error message with a safe relative path.
Decryption key:


Modal Survey - Best WordPress Poll, Survey & Quiz Plugin v2.0.2.2.3 Nulled
2.0.2.2.3
Security & Bug Fixes:
- Critical: Fixed logic bug where assignment operator was used instead of equality check for survey style detection, causing all surveys to incorrectly use the 'click' branch.
- Critical: Fixed path traversal vulnerability in campaign module loader; allowed module names are now strictly whitelisted.
- Critical: Sanitized cookie-sourced survey_viewed arrays with absint() before use in SQL IN clauses to prevent injection via crafted cookie values.
- Security: All plugin cookies (ms-uid, ms-session, modal_survey) now set secure=is_ssl() and httponly=true, including legacy fallback setcookie() calls.
- Security: Replaced insecure mt_rand()-based session ID generation with cryptographically secure bin2hex(random_bytes(16)).
- Security: Escaped featured image URL with esc_url() in Open Graph meta output.
- Security: Fixed unsanitized direct $_COOKIE['ms-uid'] access in ajax_survey_back; now uses sanitize_text_field/wp_unslash with isset guard.
- Security: Reduced export directory permissions from 0777 to 0755.
- Bug: Fixed incorrect number_format call in survey_answers average-score path; third argument was the decimal count instead of the decimal separator, producing garbled output.
- Bug: Fixed undefined variable warnings in survey_open_answers, survey_records, and survey_compare_chart shortcode handlers when results are absent or labels/sessions are not set.

About us

  • Babiato Forum - The webmaster community has been around for many years and pride ourselves on offering unbiased, critical discussion among people of all different backgrounds. We are working every day, updating Daily resource to make sure our community is one of the best.

Quick Navigation

User Menu