Quiz And Survey Master vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

QA

Product

Quiz And Survey Master

by ExpressTech · last CVE Oct 19, 2026

46

CVEs

0

On KEV

9.9

Max CVSS

5

New 30D

Vulnerabilities46 In the news0 Timeline

Severity mix

Critical 4High 14Medium 28Low 0

Severity

All severities46 Critical4 High14 Medium28 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Quiz And Survey Master to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-111408	8.8	0%	Oct 19	WordPress Quiz And Survey Master plugin <= 11.2.7 - PHP Object Injection vulnerability Affected: through 11.2.7
CVE-2026-104392	8.8	0%	Oct 9	WordPress Quiz And Survey Master plugin <= 11.2.7 - PHP Object Injection vulnerability Affected: through 11.2.7
CVE-2024-5606	8.8	1%	Jul 2	The Quiz and Survey Master (QSM) WordPress plugin before 9.0.2 is vulnerable does not validate and escape the question_id parameter in the qsm_bulk_delete_question_from_database… Affected: before 9.0.2
CVE-2023-26524	8.8	0%	Nov 13	Cross-Site Request Forgery (CSRF) vulnerability in ExpressTech Quiz And Survey Master – Best Quiz, Exam and Survey Plugin for WordPress plugin <= 8.0.10 versions Affected: through 8.0.10
CVE-2022-46862	8.8	0%	Feb 14	Cross-Site Request Forgery (CSRF) vulnerability in ExpressTech Quiz And Survey Master – Best Quiz, Exam and Survey Plugin for WordPress plugin <= 8.0.7 versions Affected: before 8.0.8
CVE-2021-36906	8.8	1%	Nov 3	WordPress Quiz And Survey Master plugin <= 7.3.6 - Multiple Insecure direct object references (IDOR) vulnerabilities Affected: through 7.3.6
CVE-2022-0180	8.8	1%	Jan 17	Cross-site request forgery (CSRF) vulnerability in Quiz And Survey Master versions prior to 7.3.7 allows a remote attacker to hijack the authentication of administrators and… Affected: before 7.3.7
CVE-2021-24221	8.8	2%	Apr 12	The Quiz And Survey Master – Best Quiz, Exam and Survey Plugin for WordPress plugin before 7.1.12 did not sanitise the result_id GET parameter on pages with the [qsm_result]… Affected: before 7.1.12
CVE-2023-0292	8.1	1%	Jun 9	The Quiz And Survey Master plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 8.0.8 Affected: through 8.0.8
CVE-2022-42883	7.5	1%	Nov 18	Sensitive Information Disclosure vulnerability discovered by Quiz And Survey Master plugin <= 7.3.10 on WordPress Affected: through 7.3.10
CVE-2021-36898	7.2	1%	Oct 28	WordPress Quiz And Survey Master plugin <= 7.3.4 - Auth. SQL Injection (SQLi) vulnerability Affected: through 7.3.4
CVE-2026-97289	7.1	0%	Sep 30	WordPress Quiz And Survey Master plugin <= 11.2.6 - Cross Site Scripting (XSS) vulnerability Affected: through 11.2.6
CVE-2026-48867	7.1	0%	Jun 15	WordPress Quiz And Survey Master plugin <= 11.1.2 - Cross Site Scripting (XSS) vulnerability Affected: through 11.1.2
CVE-2026-40787	7.1	0%	Jun 15	WordPress Quiz And Survey Master plugin <= 11.0.0 - Cross Site Scripting (XSS) vulnerability Affected: through 11.0.0