Browse CVEs

MEDIUM 6.5 CVE-2025-9318 The Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker plugin for WordPress is vulnerable to time-based SQL Injection via the ‘is_linking’ par… Quiz And Survey Master 10.3.2+ Fix from $1,6002026-01-06 MEDIUM 6.5 CVE-2025-9637 The Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker plugin for WordPress is vulnerable to unauthorized access and modification of data due … Quiz And Survey Master 10.3.2+ Fix from $1,6002026-01-06 MEDIUM 6.1 CVE-2024-10679 The Quiz and Survey Master (QSM) WordPress plugin before 9.2.1 does not sanitise and escape some of its settings, which could allow high privilege u… Quiz And Survey Master 9.2.1+ Fix from $1,6002025-03-25 MEDIUM 5.9 CVE-2024-6390 The Quiz and Survey Master (QSM) WordPress plugin before 9.1.0 does not properly sanitise and escape some of its Quizz settings, which could allow h… Quiz And Survey Master 9.1.0+ Fix from $1,6002024-08-03 MEDIUM 5.4 CVE-2024-6025 The Quiz and Survey Master (QSM) WordPress plugin before 9.0.5 does not sanitise and escape some of its Quiz settings, which could allow contributor… Quiz And Survey Master 9.0.5+ Fix from $1,6002024-07-11 HIGH 8.8 CVE-2024-5606 The Quiz and Survey Master (QSM) WordPress plugin before 9.0.2 is vulnerable does not validate and escape the question_id parameter in the qsm_bulk_… Quiz And Survey Master 9.0.2+ Fix from $1,9502024-07-02 MEDIUM 5.5 CVE-2024-4934 The Quiz and Survey Master (QSM) WordPress plugin before 9.0.2 does not validate and escape some of its Quiz fields before outputting them back in a… Quiz And Survey Master 9.0.2+ Fix from $1,6002024-07-01 MEDIUM 5.3 CVE-2023-51507 Missing Authorization vulnerability in ExpressTech Quiz And Survey Master.This issue affects Quiz And Survey Master: from n/a through 8.1.16. Quiz And Survey Master 8.1.17+ Fix from $1,6002024-06-14 MEDIUM 6.5 CVE-2024-3592 The Quiz And Survey Master – Best Quiz, Exam and Survey Plugin for WordPress plugin for WordPress is vulnerable to SQL Injection via the 'question_id… Quiz And Survey Master 9.0.2+ Fix from $1,6002024-06-07 HIGH 8.8 CVE-2023-26524 Cross-Site Request Forgery (CSRF) vulnerability in ExpressTech Quiz And Survey Master – Best Quiz, Exam and Survey Plugin for WordPress plugin <= 8.0… Quiz And Survey Master after 8.0.10 Fix from $1,9502023-11-13 MEDIUM 5.4 CVE-2023-3575 The Quiz And Survey Master WordPress plugin before 8.1.11 does not properly sanitize and escape question titles, which could allow users with the Con… Quiz And Survey Master 8.1.11+ Fix from $1,6002023-08-07 HIGH 8.1 CVE-2023-0292 The Quiz And Survey Master plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 8.0.8. This is due to m… Quiz And Survey Master after 8.0.8 Fix from $1,9502023-06-09 CRITICAL 9.1 CVE-2023-0291 The Quiz And Survey Master for WordPress is vulnerable to authorization bypass due to a missing capability check on the function associated with the … Quiz And Survey Master after 8.0.8 Fix from $2,3002023-06-09 HIGH 8.8 CVE-2022-46862 Cross-Site Request Forgery (CSRF) vulnerability in ExpressTech Quiz And Survey Master – Best Quiz, Exam and Survey Plugin for WordPress plugin <= 8.0… Quiz And Survey Master 8.0.8+ Fix from $1,9502023-02-14 MEDIUM 6.1 CVE-2022-4032 The Quiz and Survey Master plugin for WordPress is vulnerable to iFrame Injection via the 'question[id]' parameter in versions up to, and including, … Quiz And Survey Master after 8.0.4 Fix from $1,6002022-11-29 MEDIUM 5.3 CVE-2022-4033 The Quiz and Survey Master plugin for WordPress is vulnerable to input validation bypass via the 'question[id]' parameter in versions up to, and incl… Quiz And Survey Master after 8.0.4 Fix from $1,6002022-11-29 HIGH 7.5 CVE-2022-42883 Sensitive Information Disclosure vulnerability discovered by Quiz And Survey Master plugin <= 7.3.10 on WordPress. Quiz And Survey Master after 7.3.10 Fix from $1,9502022-11-18 MEDIUM 6.1 CVE-2022-40698 Auth. (subscriber+) Cross-Site Scripting (XSS) vulnerability in Quiz And Survey Master plugin <= 7.3.10 on WordPress. Quiz And Survey Master 7.3.11+ Fix from $1,6002022-11-18 CRITICAL 9.8 CVE-2022-41652 Bypass vulnerability in Quiz And Survey Master plugin <= 7.3.10 on WordPress. Quiz And Survey Master 7.3.11+ Fix from $2,3002022-11-18 MEDIUM 5.4 CVE-2021-36905 Multiple Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerabilities in Quiz And Survey Master plugin <= 7.3.4 on WordPress. Quiz And Survey Master 7.3.5+ Fix from $1,6002022-11-17 HIGH 8.8 CVE-2021-36906 Multiple Insecure Direct Object References (IDOR) vulnerabilities in ExpressTech Quiz And Survey Master plugin <= 7.3.6 on WordPress. Quiz And Survey Master after 7.3.6 Fix from $1,9502022-11-03 HIGH 7.2 CVE-2021-36898 Auth. SQL Injection (SQLi) vulnerability in Quiz And Survey Master plugin <= 7.3.4 on WordPress. Quiz And Survey Master after 7.3.4 Fix from $1,9502022-10-28 MEDIUM 5.4 CVE-2021-36864 Auth. (editor+) Reflected Cross-Site Scripting (XSS) vulnerability in ExpressTech Quiz And Survey Master plugin <= 7.3.4 on WordPress. Quiz And Survey Master after 7.3.4 Fix from $1,6002022-10-28 MEDIUM 5.4 CVE-2021-36863 Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in ExpressTech Quiz And Survey Master plugin <= 7.3.4 on WordPress. Quiz And Survey Master after 7.3.4 Fix from $1,6002022-10-28 HIGH 8.8 CVE-2022-25602 Nonce token leak vulnerability leading to arbitrary file upload, theme deletion, plugin settings change discovered in Responsive Menu WordPress plugi… Responsive Menu after 4.1.7 Fix from $1,9502022-03-18 HIGH 8.8 CVE-2022-0180 Cross-site request forgery (CSRF) vulnerability in Quiz And Survey Master versions prior to 7.3.7 allows a remote attacker to hijack the authenticati… Quiz And Survey Master 7.3.7+ Fix from $1,9502022-01-17 MEDIUM 6.1 CVE-2022-0181 Reflected cross-site scripting vulnerability in Quiz And Survey Master versions prior to 7.3.7 allows a remote attacker to inject an arbitrary script… Quiz And Survey Master 7.3.7+ Fix from $1,6002022-01-17 MEDIUM 5.4 CVE-2022-0182 Stored cross-site scripting vulnerability in Quiz And Survey Master versions prior to 7.3.7 allows a remote authenticated attacker to inject an arbit… Quiz And Survey Master 7.3.7+ Fix from $1,6002022-01-17 MEDIUM 6.1 CVE-2021-20792 Cross-site scripting vulnerability in Quiz And Survey Master versions prior to 7.1.14 allows a remote attacker to inject arbitrary script via unspeci… Quiz And Survey Master 7.1.14+ Fix from $1,6002021-08-18 MEDIUM 6.1 CVE-2021-24368 The Quiz And Survey Master – Best Quiz, Exam and Survey Plugin WordPress plugin before 7.1.18 did not sanitise or escape its result_id parameter when… Quiz And Survey Master 7.1.18+ Fix from $1,6002021-06-20