Login Request a demo
EX
Vendor
ExpressTech
5 products with CVEs on record
68
CVEs
0
On KEV
6
New 30D
Products
QA
Quiz And Survey Master
ExpressTech
9.9
46 CVEs0 on KEV5 new
QA
Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker
expresstech
7.2
4 CVEs0 on KEV1 new
QA
Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker
expresstech
6.5
8 CVEs0 on KEV0 new
QA
Quiz And Survey Master (WordPress plugin)
ExpressTech
8.8
5 CVEs0 on KEV0 new
RM
Responsive Menu
Expresstech
8.8
5 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-111408
QA
Quiz And Survey Master
ExpressTech
8.8
0%
Oct 19WordPress Quiz And Survey Master plugin <= 11.2.7 - PHP Object Injection vulnerability
CVE-2026-107862
QA
Quiz And Survey Master
ExpressTech
6.5
0%
Oct 12WordPress Quiz And Survey Master plugin <= 11.2.7 - Cross Site Scripting (XSS) vulnerability
CVE-2026-96558
QA
Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker
expresstech
7.2
0%
Oct 10Quiz and Survey Master (QSM) <= 11.2.6 - Unauthenticated Stored DOM-Based Cross-Site Scripting via 'qsm_hidden_questions' Parameter
CVE-2026-104392
QA
Quiz And Survey Master
ExpressTech
8.8
0%
Oct 9WordPress Quiz And Survey Master plugin <= 11.2.7 - PHP Object Injection vulnerability
CVE-2026-104391
QA
Quiz And Survey Master
ExpressTech
6.5
0%
Oct 7WordPress Quiz And Survey Master plugin <= 11.2.7 - Cross Site Scripting (XSS) vulnerability
CVE-2026-97289
QA
Quiz And Survey Master
ExpressTech
7.1
0%
Sep 30WordPress Quiz And Survey Master plugin <= 11.2.6 - Cross Site Scripting (XSS) vulnerability
CVE-2026-15963
QA
Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker
expresstech
6.5
0%
Aug 16Quiz and Survey Master (QSM) <= 11.2.1 - Authenticated (Contributor+) SQL Injection via 'randon_category' Quiz Option
CVE-2026-11780
QA
Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker
expresstech
6.4
0%
Aug 16Quiz and Survey Master (QSM) <= 11.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'question_title' Parameter
CVE-2026-13767
QA
Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker
expresstech
6.5
0%
Jul 16Quiz and Survey Master (QSM) <= 11.2.0 - Authenticated (Custom+) SQL Injection via 'pages' Parameter
CVE-2026-9230
QA
Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker
expresstech
4.3
0%
Jul 3Quiz and Survey Master (QSM) <= 11.1.4 - Missing Authorization to Authenticated (Contributor+) Arbitrary Quiz Modification and Email Reroute via Leaked Nonce from /quiz/structure
CVE-2026-9233
QA
Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker
expresstech
4.3
0%
Jun 27Quiz and Survey Master (QSM) <= 11.1.4 - Missing Authorization to Authenticated (Contributor+) Arbitrary Modification via qsm_insert_quiz_template AJAX Action
CVE-2026-48867
QA
Quiz And Survey Master
ExpressTech
7.1
0%
Jun 15WordPress Quiz And Survey Master plugin <= 11.1.2 - Cross Site Scripting (XSS) vulnerability
CVE-2026-40787
QA
Quiz And Survey Master
ExpressTech
7.1
0%
Jun 15WordPress Quiz And Survey Master plugin <= 11.0.0 - Cross Site Scripting (XSS) vulnerability
CVE-2026-6448
QA
Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker
expresstech
4.9
0%
Jun 5Quiz and Survey Master (QSM) <= 11.1.2 - Authenticated (Admin+) SQL Injection via 'order' and 'limit' Parameters
CVE-2026-5797
QA
Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker
expresstech
5.3
1%
Apr 17Quiz and Survey Master (QSM) <= 11.1.0 - Unauthenticated Shortcode Injection Leading to Arbitrary Quiz Result Disclosure via Quiz Answer Text Input Fields
CVE-2026-2412
QA
Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker
expresstech
6.5
0%
Mar 23Quiz and Survey Master (QSM) <= 10.3.5 - Authenticated (Contributor+) SQL Injection via 'merged_question' Parameter
CVE-2025-9318
QA
Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker
expresstech
6.5
0%
Jan 6Quiz and Survey Master (QSM) <= 10.3.1 - Authenticated (Subscriber+) SQL Injection via `is_linking` Query Parameter
CVE-2025-9637
QA
Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker
expresstech
6.5
0%
Jan 6Quiz and Survey Master (QSM) <= 10.3.1 - Missing Authorization to Unpublished, Private And Password-Protected Quiz Information Disclosure And Image Response Uploads
CVE-2025-9294
QA
Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker
expresstech
4.3
0%
Jan 6Quiz And Survey Master <= 10.3.1 - Missing Authorization to Authenticated (Subscriber+) Quiz Results Deletion
CVE-2024-10679
QA
Quiz And Survey Master
Expresstech
6.1
0%
Mar 25Quiz and Survey Master (QSM) < 9.2.1 - Author+ Stored XSS
CVE-2023-37984
QA
Quiz And Survey Master
ExpressTech
4.3
0%
Dec 13WordPress Quiz And Survey Master plugin <= 8.1.10 - Broken Access Control vulnerability
CVE-2024-8758
QA
Quiz And Survey Master
Expresstech
4.8
0%
Sep 23The Quiz and Survey Master (QSM) WordPress plugin before 9.1.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform…
CVE-2024-6879
QA
Quiz And Survey Master
Expresstech
4.7
0%
Aug 26The Quiz and Survey Master (QSM) WordPress plugin before 9.1.1 fails to validate and escape certain Quiz fields before displaying them on a page or post where the Quiz is…
CVE-2024-6390
QA
Quiz And Survey Master
Expresstech
5.9
0%
Aug 3The Quiz and Survey Master (QSM) WordPress plugin before 9.1.0 does not properly sanitise and escape some of its Quizz settings, which could allow high privilege users such as…
CVE-2024-6025
QA
Quiz And Survey Master
Expresstech
5.4
0%
Jul 11The Quiz and Survey Master (QSM) WordPress plugin before 9.0.5 does not sanitise and escape some of its Quiz settings, which could allow contributors and higher to perform Stored…
CVE-2024-5606
QA
Quiz And Survey Master
Expresstech
8.8
1%
Jul 2The Quiz and Survey Master (QSM) WordPress plugin before 9.0.2 is vulnerable does not validate and escape the question_id parameter in the qsm_bulk_delete_question_from_database…
CVE-2024-4934
QA
Quiz And Survey Master
Expresstech
5.5
0%
Jul 1The Quiz and Survey Master (QSM) WordPress plugin before 9.0.2 does not validate and escape some of its Quiz fields before outputting them back in a page/post where the Quiz is…
CVE-2023-51507
QA
Quiz And Survey Master
Expresstech
5.3
0%
Jun 14Missing Authorization vulnerability in ExpressTech Quiz And Survey Master.This issue affects Quiz And Survey Master: from n/a through 8.1.16
CVE-2024-3592
QA
Quiz And Survey Master
Expresstech
6.5
0%
Jun 7The Quiz And Survey Master – Best Quiz, Exam and Survey Plugin for WordPress plugin for WordPress is vulnerable to SQL Injection via the 'question_id' parameter in all versions up…
CVE-2023-26524
QA
Quiz And Survey Master
Expresstech
8.8
0%
Nov 13Cross-Site Request Forgery (CSRF) vulnerability in ExpressTech Quiz And Survey Master – Best Quiz, Exam and Survey Plugin for WordPress plugin <= 8.0.10 versions
CVE-2023-3575
QA
Quiz And Survey Master
Expresstech
5.4
1%
Aug 7The Quiz And Survey Master WordPress plugin before 8.1.11 does not properly sanitize and escape question titles, which could allow users with the Contributor role and above to…
CVE-2023-0292
QA
Quiz And Survey Master
Expresstech
8.1
1%
Jun 9The Quiz And Survey Master plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 8.0.8
CVE-2023-0291
QA
Quiz And Survey Master
Expresstech
9.1
2%
Jun 9The Quiz And Survey Master for WordPress is vulnerable to authorization bypass due to a missing capability check on the function associated with the qsm_remove_file_fd_question…
CVE-2022-46862
QA
Quiz And Survey Master
Expresstech
8.8
0%
Feb 14Cross-Site Request Forgery (CSRF) vulnerability in ExpressTech Quiz And Survey Master – Best Quiz, Exam and Survey Plugin for WordPress plugin <= 8.0.7 versions
CVE-2022-4033
QA
Quiz And Survey Master
Expresstech
5.3
1%
Nov 29The Quiz and Survey Master plugin for WordPress is vulnerable to input validation bypass via the 'question[id]' parameter in versions up to, and including, 8.0.4 due to…
CVE-2022-4032
QA
Quiz And Survey Master
Expresstech
6.1
1%
Nov 29The Quiz and Survey Master plugin for WordPress is vulnerable to iFrame Injection via the 'question[id]' parameter in versions up to, and including, 8.0.4 due to insufficient…
CVE-2022-42883
QA
Quiz And Survey Master
Expresstech
7.5
1%
Nov 18Sensitive Information Disclosure vulnerability discovered by Quiz And Survey Master plugin <= 7.3.10 on WordPress
CVE-2022-40698
QA
Quiz And Survey Master
Expresstech
6.1
0%
Nov 18Auth. (subscriber+) Cross-Site Scripting (XSS) vulnerability in Quiz And Survey Master plugin <= 7.3.10 on WordPress
CVE-2022-41652
QA
Quiz And Survey Master
Expresstech
9.8
1%
Nov 18Bypass vulnerability in Quiz And Survey Master plugin <= 7.3.10 on WordPress
CVE-2021-36905
QA
Quiz And Survey Master
Expresstech
5.4
0%
Nov 17Multiple Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerabilities in Quiz And Survey Master plugin <= 7.3.4 on WordPress
CVE-2021-36906
QA
Quiz And Survey Master (WordPress plugin)
ExpressTech
8.8
1%
Nov 3WordPress Quiz And Survey Master plugin <= 7.3.6 - Multiple Insecure direct object references (IDOR) vulnerabilities
CVE-2021-36898
QA
Quiz And Survey Master (WordPress plugin)
ExpressTech
7.2
1%
Oct 28WordPress Quiz And Survey Master plugin <= 7.3.4 - Auth. SQL Injection (SQLi) vulnerability
CVE-2021-36864
QA
Quiz And Survey Master (WordPress plugin)
ExpressTech
5.4
1%
Oct 28WordPress Quiz And Survey Master plugin <= 7.3.4 - Auth. Reflected Cross-Site Scripting (XSS) vulnerability
CVE-2021-36863
QA
Quiz And Survey Master (WordPress plugin)
ExpressTech
5.4
1%
Oct 28WordPress Quiz And Survey Master plugin <= 7.3.4 - Auth. Stored Cross-Site Scripting (XSS) vulnerability
CVE-2021-36865
QA
Quiz And Survey Master (WordPress plugin)
ExpressTech
4.3
1%
Sep 30WordPress Quiz And Survey Master plugin <= 7.3.4 - Insecure direct object references (IDOR) vulnerability
CVE-2022-25602
RM
Responsive Menu
Expresstech
8.8
1%
Mar 18Nonce token leak vulnerability leading to arbitrary file upload, theme deletion, plugin settings change discovered in Responsive Menu WordPress plugin (versions <= 4.1.7)
CVE-2022-0182
QA
Quiz And Survey Master
Expresstech
5.4
1%
Jan 17Stored cross-site scripting vulnerability in Quiz And Survey Master versions prior to 7.3.7 allows a remote authenticated attacker to inject an arbitrary script via an website…
CVE-2022-0181
QA
Quiz And Survey Master
Expresstech
6.1
1%
Jan 17Reflected cross-site scripting vulnerability in Quiz And Survey Master versions prior to 7.3.7 allows a remote attacker to inject an arbitrary script via unspecified vectors
CVE-2022-0180
QA
Quiz And Survey Master
Expresstech
8.8
1%
Jan 17Cross-site request forgery (CSRF) vulnerability in Quiz And Survey Master versions prior to 7.3.7 allows a remote attacker to hijack the authentication of administrators and…
CVE-2021-24691
QA
Quiz And Survey Master
Expresstech
4.8
1%
Oct 11The Quiz And Survey Master WordPress plugin before 7.3.2 does not escape the Quiz Url Slug setting before outputting it in some pages, which could allow high privilege users to…
CVE-2021-20792
QA
Quiz And Survey Master
Expresstech
6.1
3%
Aug 18Cross-site scripting vulnerability in Quiz And Survey Master versions prior to 7.1.14 allows a remote attacker to inject arbitrary script via unspecified vectors
CVE-2021-24368
QA
Quiz And Survey Master
Expresstech
6.1
1%
Jun 20The Quiz And Survey Master – Best Quiz, Exam and Survey Plugin WordPress plugin before 7.1.18 did not sanitise or escape its result_id parameter when displaying an existing quiz…
CVE-2021-24221
QA
Quiz And Survey Master
Expresstech
8.8
2%
Apr 12The Quiz And Survey Master – Best Quiz, Exam and Survey Plugin for WordPress plugin before 7.1.12 did not sanitise the result_id GET parameter on pages with the [qsm_result]…
CVE-2021-24162
RM
Responsive Menu
Expresstech
8.8
1%
Apr 5In the Reponsive Menu (free and Pro) WordPress plugins before 4.0.4, attackers could craft a request and trick an administrator into importing all new settings
CVE-2021-24161
RM
Responsive Menu
Expresstech
8.8
1%
Apr 5In the Reponsive Menu (free and Pro) WordPress plugins before 4.0.4, attackers could craft a request and trick an administrator into uploading a zip archive containing malicious…
CVE-2021-24160
RM
Responsive Menu
Expresstech
8.8
8%
Apr 5In the Reponsive Menu (free and Pro) WordPress plugins before 4.0.4, subscribers could upload zip archives containing malicious PHP files that would get extracted to the…
CVE-2020-35951
QA
Quiz And Survey Master
Expresstech
9.9
76%
Jan 1An issue was discovered in the Quiz and Survey Master plugin before 7.0.1 for WordPress
CVE-2020-35949
QA
Quiz And Survey Master
Expresstech
9.8
5%
Jan 1An issue was discovered in the Quiz and Survey Master plugin before 7.0.1 for WordPress
CVE-2016-11085
QA
Quiz And Survey Master
Expresstech
6.5
1%
Aug 16php/qmn_options_questions_tab.php in the quiz-master-next plugin before 4.7.9 for WordPress allows CSRF, with resultant stored XSS, via the question_name parameter because…
CVE-2019-17599
QA
Quiz And Survey Master
Expresstech
6.1
2%
Dec 13The quiz-master-next (aka Quiz And Survey Master) plugin before 6.3.5 for WordPress is affected by: Cross Site Scripting (XSS)