Skip to content
Expresstech vulnerabilities
Newest
-
expresstech quiz and survey master (qsm) – quiz maker & survey maker
Quiz and Survey Master (QSM) <= 11.2.7 - Unauthenticated Arbitrary Shortcode Execution via 'qsm_unique_key' Parameter
CVE-2026-103917
6.5 Medium
-
expresstech quiz and survey master
WordPress Quiz And Survey Master plugin <= 11.2.7 - PHP Object Injection vulnerability
CVE-2026-111408
8.8 High
-
expresstech quiz and survey master
WordPress Quiz And Survey Master plugin <= 11.2.7 - Cross Site Scripting (XSS) vulnerability
CVE-2026-107862
6.5 Medium
-
expresstech quiz and survey master (qsm) – quiz maker & survey maker
Quiz and Survey Master (QSM) <= 11.2.6 - Unauthenticated Stored DOM-Based Cross-Site Scripting via 'qsm_hidden_questions' Parameter
CVE-2026-96558
7.2 High
-
expresstech quiz and survey master
WordPress Quiz And Survey Master plugin <= 11.2.7 - PHP Object Injection vulnerability
CVE-2026-104392
8.8 High
-
expresstech quiz and survey master
WordPress Quiz And Survey Master plugin <= 11.2.7 - Cross Site Scripting (XSS) vulnerability
CVE-2026-104391
6.5 Medium
-
expresstech quiz and survey master
WordPress Quiz And Survey Master plugin <= 11.2.6 - Cross Site Scripting (XSS) vulnerability
CVE-2026-97289
7.1 High
-
expresstech quiz and survey master (qsm) – quiz maker & survey maker
Quiz and Survey Master (QSM) <= 11.2.1 - Authenticated (Contributor+) SQL Injection via 'randon_category' Quiz Option
CVE-2026-15963
6.5 Medium
-
expresstech quiz and survey master (qsm) – quiz maker & survey maker
Quiz and Survey Master (QSM) <= 11.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'question_title' Parameter
CVE-2026-11780
6.4 Medium
-
expresstech quiz and survey master (qsm) – quiz maker & survey maker
Quiz and Survey Master (QSM) <= 11.2.0 - Authenticated (Custom+) SQL Injection via 'pages' Parameter
CVE-2026-13767
6.5 Medium
-
expresstech quiz and survey master (qsm) – easy quiz and survey maker
Quiz and Survey Master (QSM) <= 11.1.4 - Missing Authorization to Authenticated (Contributor+) Arbitrary Quiz Modification and Email Reroute via Leaked Nonce from /quiz/structure
CVE-2026-9230
4.3 Medium
-
expresstech quiz and survey master (qsm) – easy quiz and survey maker
Quiz and Survey Master (QSM) <= 11.1.4 - Missing Authorization to Authenticated (Contributor+) Arbitrary Modification via qsm_insert_quiz_template AJAX Action
CVE-2026-9233
4.3 Medium
-
expresstech quiz and survey master
WordPress Quiz And Survey Master plugin <= 11.1.2 - Cross Site Scripting (XSS) vulnerability
CVE-2026-48867
7.1 High
-
expresstech quiz and survey master
WordPress Quiz And Survey Master plugin <= 11.0.0 - Cross Site Scripting (XSS) vulnerability
CVE-2026-40787
7.1 High
-
expresstech quiz and survey master (qsm) – easy quiz and survey maker
Quiz and Survey Master (QSM) <= 11.1.2 - Authenticated (Admin+) SQL Injection via 'order' and 'limit' Parameters
CVE-2026-6448
4.9 Medium
-
expresstech quiz and survey master (qsm) – easy quiz and survey maker
Quiz and Survey Master (QSM) <= 11.1.0 - Unauthenticated Shortcode Injection Leading to Arbitrary Quiz Result Disclosure via Quiz Answer Text Input Fields
CVE-2026-5797
5.3 Medium
-
expresstech quiz and survey master (qsm) – easy quiz and survey maker
Quiz and Survey Master (QSM) <= 10.3.5 - Authenticated (Contributor+) SQL Injection via 'merged_question' Parameter
CVE-2026-2412
6.5 Medium
-
expresstech quiz and survey master (qsm) – easy quiz and survey maker, quiz and survey master +1 more
Quiz and Survey Master (QSM) <= 10.3.1 - Authenticated (Subscriber+) SQL Injection via `is_linking` Query Parameter
CVE-2025-9318
6.5 Medium
-
expresstech quiz and survey master (qsm) – easy quiz and survey maker, quiz and survey master +1 more
Quiz and Survey Master (QSM) <= 10.3.1 - Missing Authorization to Unpublished, Private And Password-Protected Quiz Information Disclosure And Image Response Uploads
CVE-2025-9637
6.5 Medium
-
expresstech quiz and survey master (qsm) – easy quiz and survey maker, quiz and survey master +1 more
Quiz And Survey Master <= 10.3.1 - Missing Authorization to Authenticated (Subscriber+) Quiz Results Deletion
CVE-2025-9294
4.3 Medium
-
expresstech quiz and survey master, unknown quiz and survey master (qsm) +1 more
Quiz and Survey Master (QSM) < 9.2.1 - Author+ Stored XSS
CVE-2024-10679
6.1 Medium
-
expresstech quiz and survey master
WordPress Quiz And Survey Master plugin <= 8.1.10 - Broken Access Control vulnerability
CVE-2023-37984
4.3 Medium
-
expresstech quiz and survey master, unknown quiz and survey master (qsm) +1 more
Quiz and Survey Master (QSM) < 9.1.3 - Author+ Stored XSS
CVE-2024-8758
4.8 Medium
-
expresstech quiz and survey master, unknown quiz and survey master (qsm) +1 more
Quiz and Survey Master (QSM) < 9.1.1 - Contributor+ Stored XSS
CVE-2024-6879
4.7 Medium
-
expresstech quiz and survey master, unknown quiz and survey master (qsm) +1 more
Quiz and Survey Master (QSM) < 9.1.0 - Contributor+ Stored XSS
CVE-2024-6390
5.9 Medium
-
expresstech quiz and survey master, unknown quiz and survey master (qsm) +1 more
Quiz and Survey Master < 9.0.5 - Contributor+ Stored XSS
CVE-2024-6025
5.4 Medium
-
expresstech quiz and survey master, unknown quiz and survey master (qsm) +1 more
Quiz And Survey Master < 9.0.2 - Contributor+ SQLi
CVE-2024-5606
8.8 High
-
expresstech quiz and survey master, unknown quiz and survey master (qsm) +1 more
Quiz And Survey Master < 9.0.2 - Contributor+ Stored XSS
CVE-2024-4934
5.5 Medium
-
expresstech quiz and survey master
WordPress Quiz And Survey Master plugin <= 8.1.16 - Broken Access Control vulnerability
CVE-2023-51507
5.3 Medium
-
expresstech quiz and survey master, quiz and survey master (qsm) – easy quiz and survey maker +1 more
Quiz And Survey Master – Best Quiz, Exam and Survey Plugin for WordPress <= 9.0.1 - Authenticated (Contributor+) SQL Injection
CVE-2024-3592
9.9 Critical
-
expresstech quiz and survey master
WordPress Quiz And Survey Master plugin <= 8.1.4 - Unauthenticated SQL Injection vulnerability
CVE-2023-28787
9.3 Critical
-
expresstech quiz and survey master
WordPress Quiz And Survey Master plugin <= 8.2.2 - Cross Site Scripting (XSS) vulnerability
CVE-2024-27966
5.9 Medium
-
expresstech quiz and survey master
WordPress Quiz And Survey Master plugin <= 8.1.18 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2023-51521
5.4 Medium
-
expresstech quiz and survey master
WordPress Quiz And Survey Master Plugin <= 8.1.13 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-47834
6.5 Medium
-
expresstech quiz and survey master – best quiz, exam and survey plugin for wordpress, quiz and survey master +1 more
WordPress Quiz And Survey Master Plugin <= 8.0.10 is vulnerable to Cross Site Request Forgery (CSRF)
CVE-2023-26524
4.3 Medium
-
expresstech quiz and survey master
Quiz And Survey Master < 8.1.11 - Contributor+ Stored XSS
CVE-2023-3575
5.4 Medium
-
expresstech quiz and survey master, quiz and survey master (qsm) – easy quiz and survey maker +1 more
Quiz And Survey Master <= 8.0.8 - Cross-Site Request Forgery to Arbitrary Media Deletion
CVE-2023-0292
5.4 Medium
-
expresstech quiz and survey master, quiz and survey master (qsm) – easy quiz and survey maker +1 more
Quiz And Survey Master <= 8.0.8 - Unauthenticated Arbitrary Media Deletion
CVE-2023-0291
7.2 High
-
expresstech quiz and survey master – best quiz, exam and survey plugin for wordpress, quiz and survey master +1 more
WordPress Quiz And Survey Master Plugin <= 8.0.7 is vulnerable to Cross Site Request Forgery (CSRF)
CVE-2022-46862
4.3 Medium
-
expresstech quiz and survey master, quiz and survey master (qsm) – easy quiz and survey maker +1 more
Quiz and Survey Master <= 8.0.4 - Improper Input Validation
CVE-2022-4033
5.3 Medium
-
expresstech quiz and survey master, quiz and survey master (qsm) – easy quiz and survey maker +1 more
Quiz and Survey Master <= 8.0.4 - Unauthenticated iFrame Injection via Paragraph and Short Answer
CVE-2022-4032
7.2 High
-
expresstech quiz and survey master, quiz and survey master (wordpress plugin) +1 more
WordPress Quiz And Survey Master plugin <= 7.3.10 - Sensitive Information Disclosure vulnerability
CVE-2022-42883
5.3 Medium
-
expresstech quiz and survey master, quiz and survey master (wordpress plugin) +1 more
WordPress Quiz And Survey Master plugin <= 7.3.10 - Cross-Site Scripting (XSS) vulnerability
CVE-2022-40698
5.4 Medium
-
expresstech quiz and survey master, quiz and survey master (wordpress plugin) +1 more
WordPress Quiz And Survey Master plugin <= 7.3.10 - Bypass vulnerability
CVE-2022-41652
6.5 Medium
-
expresstech quiz and survey master, quiz and survey master (wordpress plugin) +1 more
WordPress Quiz And Survey Master plugin <= 7.3.4 - Multiple Auth. Stored Cross-Site Scripting (XSS) vulnerabilities
CVE-2021-36905
5.4 Medium
-
expresstech quiz and survey master, quiz and survey master (wordpress plugin) +1 more
WordPress Quiz And Survey Master plugin <= 7.3.6 - Multiple Insecure direct object references (IDOR) vulnerabilities
CVE-2021-36906
2.7 Low
-
expresstech quiz and survey master, quiz and survey master (wordpress plugin) +1 more
WordPress Quiz And Survey Master plugin <= 7.3.4 - Auth. SQL Injection (SQLi) vulnerability
CVE-2021-36898
7.5 High
-
expresstech quiz and survey master, quiz and survey master (wordpress plugin) +1 more
WordPress Quiz And Survey Master plugin <= 7.3.4 - Auth. Reflected Cross-Site Scripting (XSS) vulnerability
CVE-2021-36864
3.4 Low
-
expresstech quiz and survey master, quiz and survey master (wordpress plugin) +1 more
WordPress Quiz And Survey Master plugin <= 7.3.4 - Auth. Stored Cross-Site Scripting (XSS) vulnerability
CVE-2021-36863
5.4 Medium
-
quizandsurveymaster quiz and survey master, expresstech quiz and survey master (wordpress plugin) +1 more
WordPress Quiz And Survey Master plugin <= 7.3.4 - Insecure direct object references (IDOR) vulnerability
CVE-2021-36865
3.8 Low
- Show olderLoading…