Quiz And Survey Master vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

QA

Product

Quiz And Survey Master

by ExpressTech · last CVE Oct 19, 2026

49

CVEs

0

On KEV

9.9

Max CVSS

5

New 30D

Vulnerabilities49 In the news0 Timeline

Severity mix

Critical 5High 14Medium 30Low 0

Severity

All severities49 Critical5 High14 Medium30 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Quiz And Survey Master to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-111408	8.8	0%	Oct 19	WordPress Quiz And Survey Master plugin <= 11.2.7 - PHP Object Injection vulnerability Affected: through 11.2.7
CVE-2026-104392	8.8	0%	Oct 9	WordPress Quiz And Survey Master plugin <= 11.2.7 - PHP Object Injection vulnerability Affected: through 11.2.7
CVE-2024-5606	8.8	1%	Jul 2	Quiz And Survey Master < 9.0.2 - Contributor+ SQLi Affected: before 9.0.2
CVE-2023-26524	8.8	0%	Nov 13	Cross-Site Request Forgery (CSRF) vulnerability in ExpressTech Quiz And Survey Master – Best Quiz, Exam and Survey Plugin for WordPress plugin <= 8.0.10 versions Affected: through 8.0.10
CVE-2022-46862	8.8	0%	Feb 14	Cross-Site Request Forgery (CSRF) vulnerability in ExpressTech Quiz And Survey Master – Best Quiz, Exam and Survey Plugin for WordPress plugin <= 8.0.7 versions Affected: before 8.0.8
CVE-2021-36906	8.8	1%	Nov 3	WordPress Quiz And Survey Master plugin <= 7.3.6 - Multiple Insecure direct object references (IDOR) vulnerabilities Affected: through 7.3.6
CVE-2022-0180	8.8	1%	Jan 17	Cross-site request forgery (CSRF) vulnerability in Quiz And Survey Master versions prior to 7.3.7 allows a remote attacker to hijack the authentication of administrators and… Affected: before 7.3.7
CVE-2021-24221	8.8	2%	Apr 12	The Quiz And Survey Master – Best Quiz, Exam and Survey Plugin for WordPress plugin before 7.1.12 did not sanitise the result_id GET parameter on pages with the [qsm_result]… Affected: before 7.1.12
CVE-2023-0292	8.1	1%	Jun 9	The Quiz And Survey Master plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 8.0.8 Affected: through 8.0.8
CVE-2022-42883	7.5	1%	Nov 18	Sensitive Information Disclosure vulnerability discovered by Quiz And Survey Master plugin <= 7.3.10 on WordPress Affected: through 7.3.10
CVE-2021-36898	7.2	1%	Oct 28	WordPress Quiz And Survey Master plugin <= 7.3.4 - Auth. SQL Injection (SQLi) vulnerability Affected: through 7.3.4
CVE-2026-97289	7.1	0%	Sep 30	WordPress Quiz And Survey Master plugin <= 11.2.6 - Cross Site Scripting (XSS) vulnerability Affected: through 11.2.6
CVE-2026-48867	7.1	0%	Jun 15	WordPress Quiz And Survey Master plugin <= 11.1.2 - Cross Site Scripting (XSS) vulnerability Affected: through 11.1.2
CVE-2026-40787	7.1	0%	Jun 15	WordPress Quiz And Survey Master plugin <= 11.0.0 - Cross Site Scripting (XSS) vulnerability Affected: through 11.0.0