Vulnerability index

Browse CVEs

39 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Quiz And Survey Master MEDIUM 6.5
CVE-2025-9318

The Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker plugin for WordPress is vulnerable to time-based SQL Injection via the ‘is_linking’ par…

Fix: 10.3.2+
Fix from $1,600 2026-01-06
Quiz And Survey Master MEDIUM 6.5
CVE-2025-9637

The Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker plugin for WordPress is vulnerable to unauthorized access and modification of data due …

Fix: 10.3.2+
Fix from $1,600 2026-01-06
Quiz And Survey Master MEDIUM 6.1
CVE-2024-10679

The Quiz and Survey Master (QSM) WordPress plugin before 9.2.1 does not sanitise and escape some of its settings, which could allow high privilege u…

Fix: 9.2.1+
Fix from $1,600 2025-03-25
Quiz And Survey Master MEDIUM 5.9
CVE-2024-6390

The Quiz and Survey Master (QSM) WordPress plugin before 9.1.0 does not properly sanitise and escape some of its Quizz settings, which could allow h…

Fix: 9.1.0+
Fix from $1,600 2024-08-03
Quiz And Survey Master MEDIUM 5.4
CVE-2024-6025

The Quiz and Survey Master (QSM) WordPress plugin before 9.0.5 does not sanitise and escape some of its Quiz settings, which could allow contributor…

Fix: 9.0.5+
Fix from $1,600 2024-07-11
Quiz And Survey Master HIGH 8.8
CVE-2024-5606

The Quiz and Survey Master (QSM) WordPress plugin before 9.0.2 is vulnerable does not validate and escape the question_id parameter in the qsm_bulk_…

Fix: 9.0.2+
Fix from $1,950 2024-07-02
Quiz And Survey Master MEDIUM 5.5
CVE-2024-4934

The Quiz and Survey Master (QSM) WordPress plugin before 9.0.2 does not validate and escape some of its Quiz fields before outputting them back in a…

Fix: 9.0.2+
Fix from $1,600 2024-07-01
Quiz And Survey Master MEDIUM 5.3
CVE-2023-51507

Missing Authorization vulnerability in ExpressTech Quiz And Survey Master.This issue affects Quiz And Survey Master: from n/a through 8.1.16.

Fix: 8.1.17+
Fix from $1,600 2024-06-14
Quiz And Survey Master MEDIUM 6.5
CVE-2024-3592

The Quiz And Survey Master – Best Quiz, Exam and Survey Plugin for WordPress plugin for WordPress is vulnerable to SQL Injection via the 'question_id…

Fix: 9.0.2+
Fix from $1,600 2024-06-07
Quiz And Survey Master HIGH 8.8
CVE-2023-26524

Cross-Site Request Forgery (CSRF) vulnerability in ExpressTech Quiz And Survey Master – Best Quiz, Exam and Survey Plugin for WordPress plugin <= 8.0…

Fix: after 8.0.10
Fix from $1,950 2023-11-13
Quiz And Survey Master MEDIUM 5.4
CVE-2023-3575

The Quiz And Survey Master WordPress plugin before 8.1.11 does not properly sanitize and escape question titles, which could allow users with the Con…

Fix: 8.1.11+
Fix from $1,600 2023-08-07
Quiz And Survey Master HIGH 8.1
CVE-2023-0292

The Quiz And Survey Master plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 8.0.8. This is due to m…

Fix: after 8.0.8
Fix from $1,950 2023-06-09
Quiz And Survey Master CRITICAL 9.1
CVE-2023-0291

The Quiz And Survey Master for WordPress is vulnerable to authorization bypass due to a missing capability check on the function associated with the …

Fix: after 8.0.8
Fix from $2,300 2023-06-09
Quiz And Survey Master HIGH 8.8
CVE-2022-46862

Cross-Site Request Forgery (CSRF) vulnerability in ExpressTech Quiz And Survey Master – Best Quiz, Exam and Survey Plugin for WordPress plugin <= 8.0…

Fix: 8.0.8+
Fix from $1,950 2023-02-14
Quiz And Survey Master MEDIUM 6.1
CVE-2022-4032

The Quiz and Survey Master plugin for WordPress is vulnerable to iFrame Injection via the 'question[id]' parameter in versions up to, and including, …

Fix: after 8.0.4
Fix from $1,600 2022-11-29
Quiz And Survey Master MEDIUM 5.3
CVE-2022-4033

The Quiz and Survey Master plugin for WordPress is vulnerable to input validation bypass via the 'question[id]' parameter in versions up to, and incl…

Fix: after 8.0.4
Fix from $1,600 2022-11-29
Quiz And Survey Master HIGH 7.5
CVE-2022-42883

Sensitive Information Disclosure vulnerability discovered by Quiz And Survey Master plugin <= 7.3.10 on WordPress.

Fix: after 7.3.10
Fix from $1,950 2022-11-18
Quiz And Survey Master MEDIUM 6.1
CVE-2022-40698

Auth. (subscriber+) Cross-Site Scripting (XSS) vulnerability in Quiz And Survey Master plugin <= 7.3.10 on WordPress.

Fix: 7.3.11+
Fix from $1,600 2022-11-18
Quiz And Survey Master CRITICAL 9.8
CVE-2022-41652

Bypass vulnerability in Quiz And Survey Master plugin <= 7.3.10 on WordPress.

Fix: 7.3.11+
Fix from $2,300 2022-11-18
Quiz And Survey Master MEDIUM 5.4
CVE-2021-36905

Multiple Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerabilities in Quiz And Survey Master plugin <= 7.3.4 on WordPress.

Fix: 7.3.5+
Fix from $1,600 2022-11-17
Quiz And Survey Master HIGH 8.8
CVE-2021-36906

Multiple Insecure Direct Object References (IDOR) vulnerabilities in ExpressTech Quiz And Survey Master plugin <= 7.3.6 on WordPress.

Fix: after 7.3.6
Fix from $1,950 2022-11-03
Quiz And Survey Master HIGH 7.2
CVE-2021-36898

Auth. SQL Injection (SQLi) vulnerability in Quiz And Survey Master plugin <= 7.3.4 on WordPress.

Fix: after 7.3.4
Fix from $1,950 2022-10-28
Quiz And Survey Master MEDIUM 5.4
CVE-2021-36864

Auth. (editor+) Reflected Cross-Site Scripting (XSS) vulnerability in ExpressTech Quiz And Survey Master plugin <= 7.3.4 on WordPress.

Fix: after 7.3.4
Fix from $1,600 2022-10-28
Quiz And Survey Master MEDIUM 5.4
CVE-2021-36863

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in ExpressTech Quiz And Survey Master plugin <= 7.3.4 on WordPress.

Fix: after 7.3.4
Fix from $1,600 2022-10-28
Responsive Menu HIGH 8.8
CVE-2022-25602

Nonce token leak vulnerability leading to arbitrary file upload, theme deletion, plugin settings change discovered in Responsive Menu WordPress plugi…

Fix: after 4.1.7
Fix from $1,950 2022-03-18
Quiz And Survey Master HIGH 8.8
CVE-2022-0180

Cross-site request forgery (CSRF) vulnerability in Quiz And Survey Master versions prior to 7.3.7 allows a remote attacker to hijack the authenticati…

Fix: 7.3.7+
Fix from $1,950 2022-01-17
Quiz And Survey Master MEDIUM 6.1
CVE-2022-0181

Reflected cross-site scripting vulnerability in Quiz And Survey Master versions prior to 7.3.7 allows a remote attacker to inject an arbitrary script…

Fix: 7.3.7+
Fix from $1,600 2022-01-17
Quiz And Survey Master MEDIUM 5.4
CVE-2022-0182

Stored cross-site scripting vulnerability in Quiz And Survey Master versions prior to 7.3.7 allows a remote authenticated attacker to inject an arbit…

Fix: 7.3.7+
Fix from $1,600 2022-01-17
Quiz And Survey Master MEDIUM 6.1
CVE-2021-20792

Cross-site scripting vulnerability in Quiz And Survey Master versions prior to 7.1.14 allows a remote attacker to inject arbitrary script via unspeci…

Fix: 7.1.14+
Fix from $1,600 2021-08-18
Quiz And Survey Master MEDIUM 6.1
CVE-2021-24368

The Quiz And Survey Master – Best Quiz, Exam and Survey Plugin WordPress plugin before 7.1.18 did not sanitise or escape its result_id parameter when…

Fix: 7.1.18+
Fix from $1,600 2021-06-20