QM
Product
Quiz Maker
20
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 2High 6Medium 12Low 0
Watch
Add Quiz Maker to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-30774 | 9.8 | Apr 1 | WordPress Quiz Maker plugin <= 6.6.8.7 - SQL Injection vulnerability Affected: through 6.6.8.7 |
| CVE-2024-6028 | 9.8 | Jun 25 | Quiz Maker <= 6.5.8.3 - Unauthenticated SQL Injection via 'ays_questions' Parameter Affected: through 6.5.8.3 |
| CVE-2025-12426 | 7.5 | Nov 19 | Quiz Maker <= 6.7.0.80 - Unauthenticated Sensitive Information Exposure Affected: through 6.7.0.80 |
| CVE-2025-58015 | 7.5 | Sep 22 | WordPress Quiz Maker Plugin <= 6.7.0.65 - Sensitive Data Exposure Vulnerability Affected: through 6.7.0.65 |
| CVE-2025-10042 | 7.5 | Sep 17 | Quiz Maker <= 6.7.0.56 - Unauthenticated SQL Injection Affected: through 6.7.0.56 |
| CVE-2024-10628 | 7.5 | Jan 26 | Quiz Maker Business, Developer, and Agency <= (Multiple Versions) - Unauthenticated SQL Injection via id Affected: 7.0.0 before 8.8.0.100; 20.0.0 before 21.8.0.100; 30.0.0 before 31.8.0.100 |
| CVE-2021-24456 | 7.2 | Aug 2 | Quiz Maker < 6.2.0.9 - Multiple Authenticated Blind SQL Injections Affected: 6.2.0.9 before 6.2.0.9 |
| CVE-2026-110379 | 7.1 | Oct 19 | WordPress Quiz Maker plugin <= 6.7.1.91 - Cross Site Scripting (XSS) vulnerability Affected: through 6.7.1.91 |
| CVE-2024-22027 | 6.5 | Jan 12 | Improper input validation vulnerability in WordPress Quiz Maker Plugin prior to 6.5.0.6 allows a remote authenticated attacker to perform a Denial of Service (DoS) attack against… Affected: before 6.5.0.6 |
| CVE-2026-2384 | 6.4 | Feb 20 | Quiz Maker <= 6.7.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Affected: through 6.7.1.7 |
| CVE-2023-6166 | 6.1 | Dec 26 | Quiz Maker < 6.4.9.5 - Reflected Cross-Site Scripting Affected: before 6.4.9.5 |
| CVE-2023-2571 | 6.1 | Jun 5 | Quiz Maker < 6.4.2.7 - Reflected XSS Affected: before 6.4.2.7 |
| CVE-2023-23985 | 5.3 | Apr 24 | WordPress Quiz Maker plugin <= 6.3.9.4 - Content Spoofing Affected: before 6.3.9.5 |
| CVE-2024-1079 | 5.3 | Feb 7 | Quiz Maker <= 6.5.2.4 - Missing Authorization to Unauthenticated Quiz Data Retrieval Affected: through 6.5.2.4 |
| CVE-2023-6155 | 5.3 | Dec 26 | Quiz Maker < 6.4.9.5 - Unauthenticated Email Address Disclosure Affected: before 6.4.9.5 |
| CVE-2024-8617 | 4.8 | May 15 | Quiz Maker <= 6.5.9.8 - Admin+ Stored XSS Affected: before 6.5.9.9 |
| CVE-2026-32342 | 4.3 | Mar 13 | WordPress Quiz Maker plugin <= 6.7.1.2 - Cross Site Request Forgery (CSRF) vulnerability Affected: through 6.7.1.2 |
| CVE-2025-67595 | 4.3 | Dec 9 | WordPress Quiz Maker plugin <= 6.7.0.82 - Cross Site Request Forgery (CSRF) vulnerability Affected: through 6.7.0.82 |
| CVE-2025-58014 | 4.3 | Sep 22 | WordPress Quiz Maker Plugin <= 6.7.0.64 - Cross Site Request Forgery (CSRF) Vulnerability Affected: through 6.7.0.64 |
| CVE-2024-1078 | 4.3 | Feb 7 | Quiz Maker <= 6.5.2.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Quiz Creation & Modification Affected: through 6.5.2.4 |
Showing 20