2.7
Low
CVE-2026-14821 The Quiz and Survey Master (QSM) WordPress plugin before 11.1.5 does not perform a capability check before deleting…
Description
The Quiz and Survey Master (QSM) WordPress plugin before 11.1.5 does not perform a capability check before deleting output templates, allowing users with contributor-level access and above to delete arbitrary templates.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Quiz and Survey Master (QSM) 11.1 | earliest → < 11.1.5 | 11.1.5 |
References
- wpscan.com wpscan.com
Timeline
- Published
- Last modified
Other CVEs of Quiz and Survey Master (QSM)
The 14 CVEs of Quiz and Survey Master (QSM) →
CVE-2026-79615
The Quiz and Survey Master (QSM) WordPress plugin before 11.2.4 does not check authorisation when returning question…
2.7
Low
CVE-2026-14826
The Quiz and Survey Master (QSM) WordPress plugin before 11.2.4 does not perform a per-object ownership check on the…
2.7
Low
CVE-2026-14825
The Quiz and Survey Master (QSM) WordPress plugin before 11.2.4 does not perform a per-object ownership check before…
2.7
Low
CVE-2026-14824
The Quiz and Survey Master (QSM) WordPress plugin before 11.2.2 does not properly escape a question setting before…
4.8
Medium