Skip to content

Known vulnerabilities in ExpressTech Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker

Is your version affected?

CVE Summary Score Published
CVE-2026-9230 The Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker plugin for WordPress is vulnerable to authorization bypass… 4.3 Medium Jul 3, 2026
CVE-2026-9233 The Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker plugin for WordPress is vulnerable to authorization bypass… 4.3 Medium Jun 27, 2026
CVE-2026-6448 The Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker plugin for WordPress is vulnerable to time-based blind SQL… 4.9 Medium Jun 5, 2026
CVE-2026-5797 The Quiz And Survey Master plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in versions up to and… 5.3 Medium Apr 17, 2026
CVE-2026-2412 The Quiz and Survey Master (QSM) plugin for WordPress is vulnerable to SQL Injection via the 'merged_question' parameter… 6.5 Medium Mar 23, 2026
CVE-2025-9318 The Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker plugin for WordPress is vulnerable to time-based SQL… 6.5 Medium Jan 6, 2026
CVE-2025-9637 The Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker plugin for WordPress is vulnerable to unauthorized… 6.5 Medium Jan 6, 2026
CVE-2025-9294 The Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker plugin for WordPress is vulnerable to unauthorized loss of… 4.3 Medium Jan 6, 2026
CVE-2024-3592 The Quiz And Survey Master – Best Quiz, Exam and Survey Plugin for WordPress plugin for WordPress is vulnerable to SQL… 9.9 Critical Jun 7, 2024
CVE-2023-0292 The Quiz And Survey Master plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and… 5.4 Medium Jun 9, 2023
CVE-2023-0291 The Quiz And Survey Master for WordPress is vulnerable to authorization bypass due to a missing capability check on… 7.2 High Jun 9, 2023
CVE-2022-4033 The Quiz and Survey Master plugin for WordPress is vulnerable to input validation bypass via the 'question[id]'… 5.3 Medium Nov 29, 2022
CVE-2022-4032 The Quiz and Survey Master plugin for WordPress is vulnerable to iFrame Injection via the 'question[id]' parameter in… 7.2 High Nov 29, 2022

Other ExpressTech products