Skip to contentExpresstech Quiz And Survey Master vulnerabilities
- expresstech quiz and survey master (qsm) – quiz maker & survey makerQuiz and Survey Master (QSM) <= 11.2.9 - Authenticated (Contributor+) SQL Injection via 'qpages' ParameterCVE-2026-1165096.5 Medium
- expresstech quiz and survey masterWordPress Quiz And Survey Master plugin <= 11.3.0 - Content Injection vulnerabilityCVE-2026-1257865.3 Medium
- expresstech quiz and survey masterWordPress Quiz And Survey Master plugin <= 11.3.0 - Broken Access Control vulnerabilityCVE-2026-1257875.4 Medium
- expresstech quiz and survey master (qsm) – quiz maker & survey makerQuiz and Survey Master (QSM) <= 11.2.7 - Unauthenticated Arbitrary Shortcode Execution via 'qsm_unique_key' ParameterCVE-2026-1039176.5 Medium
- expresstech quiz and survey masterWordPress Quiz And Survey Master plugin <= 11.2.7 - PHP Object Injection vulnerabilityCVE-2026-1114088.8 High
- expresstech quiz and survey masterWordPress Quiz And Survey Master plugin <= 11.2.7 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-1078626.5 Medium
- expresstech quiz and survey master (qsm) – quiz maker & survey makerQuiz and Survey Master (QSM) <= 11.2.6 - Unauthenticated Stored DOM-Based Cross-Site Scripting via 'qsm_hidden_questions' ParameterCVE-2026-965587.2 High
- expresstech quiz and survey masterWordPress Quiz And Survey Master plugin <= 11.2.7 - PHP Object Injection vulnerabilityCVE-2026-1043928.8 High
- expresstech quiz and survey masterWordPress Quiz And Survey Master plugin <= 11.2.7 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-1043916.5 Medium
- expresstech quiz and survey masterWordPress Quiz And Survey Master plugin <= 11.2.6 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-972897.1 High
- expresstech quiz and survey master (qsm) – quiz maker & survey makerQuiz and Survey Master (QSM) <= 11.2.1 - Authenticated (Contributor+) SQL Injection via 'randon_category' Quiz OptionCVE-2026-159636.5 Medium
- expresstech quiz and survey master (qsm) – quiz maker & survey makerQuiz and Survey Master (QSM) <= 11.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'question_title' ParameterCVE-2026-117806.4 Medium
- expresstech quiz and survey master (qsm) – quiz maker & survey makerQuiz and Survey Master (QSM) <= 11.2.0 - Authenticated (Custom+) SQL Injection via 'pages' ParameterCVE-2026-137676.5 Medium
- expresstech quiz and survey master (qsm) – easy quiz and survey makerQuiz and Survey Master (QSM) <= 11.1.4 - Missing Authorization to Authenticated (Contributor+) Arbitrary Quiz Modification and Email Reroute via Leaked Nonce from /quiz/structureCVE-2026-92304.3 Medium
- expresstech quiz and survey master (qsm) – easy quiz and survey makerQuiz and Survey Master (QSM) <= 11.1.4 - Missing Authorization to Authenticated (Contributor+) Arbitrary Modification via qsm_insert_quiz_template AJAX ActionCVE-2026-92334.3 Medium
- expresstech quiz and survey masterWordPress Quiz And Survey Master plugin <= 11.1.2 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-488677.1 High
- expresstech quiz and survey masterWordPress Quiz And Survey Master plugin <= 11.0.0 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-407877.1 High
- expresstech quiz and survey master (qsm) – easy quiz and survey makerQuiz and Survey Master (QSM) <= 11.1.2 - Authenticated (Admin+) SQL Injection via 'order' and 'limit' ParametersCVE-2026-64484.9 Medium
- expresstech quiz and survey master (qsm) – easy quiz and survey makerQuiz and Survey Master (QSM) <= 11.1.0 - Unauthenticated Shortcode Injection Leading to Arbitrary Quiz Result Disclosure via Quiz Answer Text Input FieldsCVE-2026-57975.3 Medium
- expresstech quiz and survey master (qsm) – easy quiz and survey makerQuiz and Survey Master (QSM) <= 10.3.5 - Authenticated (Contributor+) SQL Injection via 'merged_question' ParameterCVE-2026-24126.5 Medium
- expresstech quiz and survey master (qsm) – easy quiz and survey maker, quiz and survey master +1 moreQuiz and Survey Master (QSM) <= 10.3.1 - Authenticated (Subscriber+) SQL Injection via `is_linking` Query ParameterCVE-2025-93186.5 Medium
- expresstech quiz and survey master (qsm) – easy quiz and survey maker, quiz and survey master +1 moreQuiz and Survey Master (QSM) <= 10.3.1 - Missing Authorization to Unpublished, Private And Password-Protected Quiz Information Disclosure And Image Response UploadsCVE-2025-96376.5 Medium
- expresstech quiz and survey master (qsm) – easy quiz and survey maker, quiz and survey master +1 moreQuiz And Survey Master <= 10.3.1 - Missing Authorization to Authenticated (Subscriber+) Quiz Results DeletionCVE-2025-92944.3 Medium
- expresstech quiz and survey masterWordPress Quiz And Survey Master plugin <= 8.1.10 - Broken Access Control vulnerabilityCVE-2023-379844.3 Medium
- expresstech quiz and survey masterWordPress Quiz And Survey Master plugin <= 8.1.16 - Broken Access Control vulnerabilityCVE-2023-515075.3 Medium
- expresstech quiz and survey master, quiz and survey master (qsm) – easy quiz and survey maker +1 moreQuiz And Survey Master – Best Quiz, Exam and Survey Plugin for WordPress <= 9.0.1 - Authenticated (Contributor+) SQL InjectionCVE-2024-35929.9 Critical
- expresstech quiz and survey masterWordPress Quiz And Survey Master plugin <= 8.1.4 - Unauthenticated SQL Injection vulnerabilityCVE-2023-287879.3 Critical
- expresstech quiz and survey masterWordPress Quiz And Survey Master plugin <= 8.2.2 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-279665.9 Medium
- expresstech quiz and survey masterWordPress Quiz And Survey Master plugin <= 8.1.18 - Cross Site Request Forgery (CSRF) vulnerabilityCVE-2023-515215.4 Medium
- expresstech quiz and survey masterWordPress Quiz And Survey Master Plugin <= 8.1.13 is vulnerable to Cross Site Scripting (XSS)CVE-2023-478346.5 Medium
- expresstech quiz and survey master – best quiz, exam and survey plugin for wordpress, quiz and survey master +1 moreWordPress Quiz And Survey Master Plugin <= 8.0.10 is vulnerable to Cross Site Request Forgery (CSRF)CVE-2023-265244.3 Medium
- expresstech quiz and survey master, quiz and survey master (qsm) – easy quiz and survey maker +1 moreQuiz And Survey Master <= 8.0.8 - Cross-Site Request Forgery to Arbitrary Media DeletionCVE-2023-02925.4 Medium
- expresstech quiz and survey master, quiz and survey master (qsm) – easy quiz and survey maker +1 moreQuiz And Survey Master <= 8.0.8 - Unauthenticated Arbitrary Media DeletionCVE-2023-02917.2 High
- expresstech quiz and survey master – best quiz, exam and survey plugin for wordpress, quiz and survey master +1 moreWordPress Quiz And Survey Master Plugin <= 8.0.7 is vulnerable to Cross Site Request Forgery (CSRF)CVE-2022-468624.3 Medium
- expresstech quiz and survey master, quiz and survey master (qsm) – easy quiz and survey maker +1 moreQuiz and Survey Master <= 8.0.4 - Improper Input ValidationCVE-2022-40335.3 Medium
- expresstech quiz and survey master, quiz and survey master (qsm) – easy quiz and survey maker +1 moreQuiz and Survey Master <= 8.0.4 - Unauthenticated iFrame Injection via Paragraph and Short AnswerCVE-2022-40327.2 High
- expresstech quiz and survey master, quiz and survey master (wordpress plugin) +1 moreWordPress Quiz And Survey Master plugin <= 7.3.10 - Sensitive Information Disclosure vulnerabilityCVE-2022-428835.3 Medium
- expresstech quiz and survey master, quiz and survey master (wordpress plugin) +1 moreWordPress Quiz And Survey Master plugin <= 7.3.10 - Cross-Site Scripting (XSS) vulnerabilityCVE-2022-406985.4 Medium
- expresstech quiz and survey master, quiz and survey master (wordpress plugin) +1 moreWordPress Quiz And Survey Master plugin <= 7.3.10 - Bypass vulnerabilityCVE-2022-416526.5 Medium
- expresstech quiz and survey master, quiz and survey master (wordpress plugin) +1 moreWordPress Quiz And Survey Master plugin <= 7.3.4 - Multiple Auth. Stored Cross-Site Scripting (XSS) vulnerabilitiesCVE-2021-369055.4 Medium
- expresstech quiz and survey master, quiz and survey master (wordpress plugin) +1 moreWordPress Quiz And Survey Master plugin <= 7.3.6 - Multiple Insecure direct object references (IDOR) vulnerabilitiesCVE-2021-369062.7 Low
- expresstech quiz and survey master, quiz and survey master (wordpress plugin) +1 moreWordPress Quiz And Survey Master plugin <= 7.3.4 - Auth. SQL Injection (SQLi) vulnerabilityCVE-2021-368987.5 High
- expresstech quiz and survey master, quiz and survey master (wordpress plugin) +1 moreWordPress Quiz And Survey Master plugin <= 7.3.4 - Auth. Reflected Cross-Site Scripting (XSS) vulnerabilityCVE-2021-368643.4 Low
- expresstech quiz and survey master, quiz and survey master (wordpress plugin) +1 moreWordPress Quiz And Survey Master plugin <= 7.3.4 - Auth. Stored Cross-Site Scripting (XSS) vulnerabilityCVE-2021-368635.4 Medium
- quizandsurveymaster quiz and survey master, expresstech quiz and survey master (wordpress plugin) +1 moreWordPress Quiz And Survey Master plugin <= 7.3.4 - Insecure direct object references (IDOR) vulnerabilityCVE-2021-368653.8 Low
- expresstech quiz and survey masterStored cross-site scripting vulnerability in Quiz And Survey Master versions prior to 7.3.7...CVE-2022-01825.4 Medium
- expresstech quiz and survey masterReflected cross-site scripting vulnerability in Quiz And Survey Master versions prior to 7.3.7...CVE-2022-01816.1 Medium
- expresstech quiz and survey masterCross-site request forgery (CSRF) vulnerability in Quiz And Survey Master versions prior to 7.3.7...CVE-2022-01808.8 High
- expresstech quiz and survey master, quiz and survey master – best quiz, exam and survey plugin for wordpress +1 moreQuiz And Survey Master < 7.3.2 - Admin+ Stored Cross-Site ScriptingCVE-2021-246914.8 Medium
- expresstech quiz and survey masterCross-site scripting vulnerability in Quiz And Survey Master versions prior to 7.1.14 allows a...CVE-2021-207926.1 Medium
- Show moreLoading…