Login Request a demo
QA
Product
Quiz And Survey Master
by ExpressTech · last CVE Oct 19, 2026
50
CVEs
0
On KEV
9.9
Max CVSS
5
New 30D
Vulnerabilities50In the news0Timeline
Severity mix
Critical 5High 14Medium 31Low 0
Severity
All severities50Critical5High14Medium31Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Quiz And Survey Master to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-107862
6.5
0%
Oct 12
WordPress Quiz And Survey Master plugin <= 11.2.7 - Cross Site Scripting (XSS) vulnerability
Affected: through 11.2.7
CVE-2026-104391
6.5
0%
Oct 7
WordPress Quiz And Survey Master plugin <= 11.2.7 - Cross Site Scripting (XSS) vulnerability
Affected: through 11.2.7
CVE-2025-9318
6.5
0%
Jan 6
Quiz and Survey Master (QSM) <= 10.3.1 - Authenticated (Subscriber+) SQL Injection via `is_linking` Query Parameter
Affected: before 10.3.2
CVE-2025-9637
6.5
0%
Jan 6
Quiz and Survey Master (QSM) <= 10.3.1 - Missing Authorization to Unpublished, Private And Password-Protected Quiz Information Disclosure And Image Response Uploads
Affected: before 10.3.2
CVE-2024-3592
6.5
0%
Jun 7
Quiz And Survey Master – Best Quiz, Exam and Survey Plugin for WordPress <= 9.0.1 - Authenticated (Contributor+) SQL Injection
Affected: before 9.0.2
CVE-2016-11085
6.5
1%
Aug 16
php/qmn_options_questions_tab.php in the quiz-master-next plugin before 4.7.9 for WordPress allows CSRF, with resultant stored XSS, via the question_name parameter because…
Affected: before 4.7.9
CVE-2024-10679
6.1
0%
Mar 25
Quiz and Survey Master (QSM) < 9.2.1 - Author+ Stored XSS
Affected: before 9.2.1
CVE-2022-4032
6.1
1%
Nov 29
Quiz and Survey Master <= 8.0.4 - Unauthenticated iFrame Injection via Paragraph and Short Answer
Affected: through 8.0.4
CVE-2022-40698
6.1
0%
Nov 18
WordPress Quiz And Survey Master plugin <= 7.3.10 - Cross-Site Scripting (XSS) vulnerability
Affected: before 7.3.11
CVE-2022-0181
6.1
1%
Jan 17
Reflected cross-site scripting vulnerability in Quiz And Survey Master versions prior to 7.3.7 allows a remote attacker to inject an arbitrary script via unspecified vectors
Affected: before 7.3.7
CVE-2021-20792
6.1
3%
Aug 18
Cross-site scripting vulnerability in Quiz And Survey Master versions prior to 7.1.14 allows a remote attacker to inject arbitrary script via unspecified vectors
Affected: before 7.1.14
CVE-2021-24368
6.1
1%
Jun 20
The Quiz And Survey Master – Best Quiz, Exam and Survey Plugin WordPress plugin before 7.1.18 did not sanitise or escape its result_id parameter when displaying an existing quiz…
Affected: before 7.1.18
CVE-2019-17599
6.1
2%
Dec 13
The quiz-master-next (aka Quiz And Survey Master) plugin before 6.3.5 for WordPress is affected by: Cross Site Scripting (XSS)
Affected: before 6.3.5
CVE-2024-6390
5.9
0%
Aug 3
Quiz and Survey Master (QSM) < 9.1.0 - Contributor+ Stored XSS
Affected: before 9.1.0
CVE-2024-27966
5.9
0%
Mar 21
WordPress Quiz And Survey Master plugin <= 8.2.2 - Cross Site Scripting (XSS) vulnerability
Affected: through 8.2.2
CVE-2024-4934
5.5
0%
Jul 1
Quiz And Survey Master < 9.0.2 - Contributor+ Stored XSS
Affected: before 9.0.2
CVE-2024-6025
5.4
0%
Jul 11
Quiz and Survey Master < 9.0.5 - Contributor+ Stored XSS
Affected: before 9.0.5
CVE-2023-51521
5.4
0%
Mar 16
WordPress Quiz And Survey Master plugin <= 8.1.18 - Cross Site Request Forgery (CSRF) vulnerability
Affected: through 8.1.18
CVE-2023-47834
5.4
0%
Nov 22
WordPress Quiz And Survey Master Plugin <= 8.1.13 is vulnerable to Cross Site Scripting (XSS)
Affected: through 8.1.13
CVE-2023-3575
5.4
1%
Aug 7
Quiz And Survey Master < 8.1.11 - Contributor+ Stored XSS
Affected: before 8.1.11
CVE-2021-36905
5.4
0%
Nov 17
WordPress Quiz And Survey Master plugin <= 7.3.4 - Multiple Auth. Stored Cross-Site Scripting (XSS) vulnerabilities
Affected: before 7.3.5
CVE-2021-36864
5.4
1%
Oct 28
WordPress Quiz And Survey Master plugin <= 7.3.4 - Auth. Reflected Cross-Site Scripting (XSS) vulnerability
Affected: through 7.3.4
CVE-2021-36863
5.4
1%
Oct 28
WordPress Quiz And Survey Master plugin <= 7.3.4 - Auth. Stored Cross-Site Scripting (XSS) vulnerability
Affected: through 7.3.4
CVE-2022-0182
5.4
1%
Jan 17
Stored cross-site scripting vulnerability in Quiz And Survey Master versions prior to 7.3.7 allows a remote authenticated attacker to inject an arbitrary script via an website…
Affected: before 7.3.7
CVE-2023-51507
5.3
0%
Jun 14
WordPress Quiz And Survey Master plugin <= 8.1.16 - Broken Access Control vulnerability
Affected: through 8.1.16
CVE-2022-4033
5.3
1%
Nov 29
Quiz and Survey Master <= 8.0.4 - Improper Input Validation
Affected: through 8.0.4
CVE-2024-8758
4.8
0%
Sep 23
Quiz and Survey Master (QSM) < 9.1.3 - Author+ Stored XSS
Affected: before 9.1.3
CVE-2021-24691
4.8
1%
Oct 11
The Quiz And Survey Master WordPress plugin before 7.3.2 does not escape the Quiz Url Slug setting before outputting it in some pages, which could allow high privilege users to…
Affected: before 7.3.2
CVE-2024-6879
4.7
0%
Aug 26
Quiz and Survey Master (QSM) < 9.1.1 - Contributor+ Stored XSS
Affected: before 9.1.1
CVE-2025-9294
4.3
0%
Jan 6
Quiz And Survey Master <= 10.3.1 - Missing Authorization to Authenticated (Subscriber+) Quiz Results Deletion
Affected: before 10.3.2
CVE-2023-37984
4.3
0%
Dec 13
WordPress Quiz And Survey Master plugin <= 8.1.10 - Broken Access Control vulnerability
Affected: through 8.1.10
Showing 31