Skip to contentExpresstech Quiz And Survey Master (qsm) – Easy Quiz And Survey Maker vulnerabilities
- expresstech quiz and survey master (qsm) – easy quiz and survey makerQuiz and Survey Master (QSM) <= 11.1.4 - Missing Authorization to Authenticated (Contributor+) Arbitrary Quiz Modification and Email Reroute via Leaked Nonce from /quiz/structureCVE-2026-92304.3 Medium
- expresstech quiz and survey master (qsm) – easy quiz and survey makerQuiz and Survey Master (QSM) <= 11.1.4 - Missing Authorization to Authenticated (Contributor+) Arbitrary Modification via qsm_insert_quiz_template AJAX ActionCVE-2026-92334.3 Medium
- expresstech quiz and survey master (qsm) – easy quiz and survey makerQuiz and Survey Master (QSM) <= 11.1.2 - Authenticated (Admin+) SQL Injection via 'order' and 'limit' ParametersCVE-2026-64484.9 Medium
- expresstech quiz and survey master (qsm) – easy quiz and survey makerQuiz and Survey Master (QSM) <= 11.1.0 - Unauthenticated Shortcode Injection Leading to Arbitrary Quiz Result Disclosure via Quiz Answer Text Input FieldsCVE-2026-57975.3 Medium
- expresstech quiz and survey master (qsm) – easy quiz and survey makerQuiz and Survey Master (QSM) <= 10.3.5 - Authenticated (Contributor+) SQL Injection via 'merged_question' ParameterCVE-2026-24126.5 Medium
- expresstech quiz and survey master (qsm) – easy quiz and survey maker, quiz and survey master +1 moreQuiz and Survey Master (QSM) <= 10.3.1 - Authenticated (Subscriber+) SQL Injection via `is_linking` Query ParameterCVE-2025-93186.5 Medium
- expresstech quiz and survey master (qsm) – easy quiz and survey maker, quiz and survey master +1 moreQuiz and Survey Master (QSM) <= 10.3.1 - Missing Authorization to Unpublished, Private And Password-Protected Quiz Information Disclosure And Image Response UploadsCVE-2025-96376.5 Medium
- expresstech quiz and survey master (qsm) – easy quiz and survey maker, quiz and survey master +1 moreQuiz And Survey Master <= 10.3.1 - Missing Authorization to Authenticated (Subscriber+) Quiz Results DeletionCVE-2025-92944.3 Medium
- expresstech quiz and survey master, quiz and survey master (qsm) – easy quiz and survey maker +1 moreQuiz And Survey Master – Best Quiz, Exam and Survey Plugin for WordPress <= 9.0.1 - Authenticated (Contributor+) SQL InjectionCVE-2024-35929.9 Critical
- expresstech quiz and survey master, quiz and survey master (qsm) – easy quiz and survey maker +1 moreQuiz And Survey Master <= 8.0.8 - Cross-Site Request Forgery to Arbitrary Media DeletionCVE-2023-02925.4 Medium
- expresstech quiz and survey master, quiz and survey master (qsm) – easy quiz and survey maker +1 moreQuiz And Survey Master <= 8.0.8 - Unauthenticated Arbitrary Media DeletionCVE-2023-02917.2 High
- expresstech quiz and survey master, quiz and survey master (qsm) – easy quiz and survey maker +1 moreQuiz and Survey Master <= 8.0.4 - Improper Input ValidationCVE-2022-40335.3 Medium
- expresstech quiz and survey master, quiz and survey master (qsm) – easy quiz and survey maker +1 moreQuiz and Survey Master <= 8.0.4 - Unauthenticated iFrame Injection via Paragraph and Short AnswerCVE-2022-40327.2 High