CVE-2026-15963Quiz and Survey Master (QSM) <= 11.2.1 - Authenticated (Contributor+) SQL Injection via 'randon_category' Quiz Option Exploitation status Not known exploited Fix Affected product Q Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker Published 08/16/2026 Severity Medium CVE-2026-11780Quiz and Survey Master (QSM) <= 11.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'question_title' Parameter Exploitation status Not known exploited Fix Affected product Q Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker Published 08/16/2026 Severity Medium CVE-2026-13767Quiz and Survey Master (QSM) <= 11.2.0 - Authenticated (Custom+) SQL Injection via 'pages' Parameter Exploitation status Not known exploited Fix Affected product Q Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker Published 07/16/2026 Severity Medium CVE-2026-9230Quiz and Survey Master (QSM) <= 11.1.4 - Missing Authorization to Authenticated (Contributor+) Arbitrary Quiz Modification and Email Reroute via Leaked Nonce from /quiz/structure Exploitation status Not known exploited Fix Affected product Q Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker Published 07/03/2026 Severity Medium CVE-2026-9233Quiz and Survey Master (QSM) <= 11.1.4 - Missing Authorization to Authenticated (Contributor+) Arbitrary Modification via qsm_insert_quiz_template AJAX Action Exploitation status Not known exploited Fix Affected product Q Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker Published 06/27/2026 Severity Medium CVE-2026-48867WordPress Quiz And Survey Master plugin <= 11.1.2 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product Q Quiz And Survey Master Published 06/15/2026 Severity High CVE-2026-40787WordPress Quiz And Survey Master plugin <= 11.0.0 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product Q Quiz And Survey Master Published 06/15/2026 Severity High CVE-2026-6448Quiz and Survey Master (QSM) <= 11.1.2 - Authenticated (Admin+) SQL Injection via 'order' and 'limit' Parameters Exploitation status Not known exploited Fix Affected product Q Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker Published 06/05/2026 Severity Medium CVE-2026-5797Quiz and Survey Master (QSM) <= 11.1.0 - Unauthenticated Shortcode Injection Leading to Arbitrary Quiz Result Disclosure via Quiz Answer Text Input Fields Exploitation status Not known exploited Fix Affected product Q Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker Published 04/17/2026 Severity Medium CVE-2026-2412Quiz and Survey Master (QSM) <= 10.3.5 - Authenticated (Contributor+) SQL Injection via 'merged_question' Parameter Exploitation status Not known exploited Fix Affected product Q Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker Published 03/23/2026 Severity Medium CVE-2025-9318Quiz and Survey Master (QSM) <= 10.3.1 - Authenticated (Subscriber+) SQL Injection via `is_linking` Query Parameter Exploitation status Not known exploited Fix Affected product Q Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker Published 01/06/2026 Severity Medium CVE-2025-9637Quiz and Survey Master (QSM) <= 10.3.1 - Missing Authorization to Unpublished, Private And Password-Protected Quiz Information Disclosure And Image Response Uploads Exploitation status Not known exploited Fix Affected product Q Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker Published 01/06/2026 Severity Medium CVE-2025-9294Quiz And Survey Master <= 10.3.1 - Missing Authorization to Authenticated (Subscriber+) Quiz Results Deletion Exploitation status Not known exploited Fix Affected product Q Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker Published 01/06/2026 Severity Medium CVE-2024-10679Quiz and Survey Master (QSM) < 9.2.1 - Author+ Stored XSS Exploitation status Public exploit Fix Affected product Q Quiz and Survey Master (QSM) Published 03/25/2025 Severity Medium CVE-2023-37984WordPress Quiz And Survey Master plugin <= 8.1.10 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product Q Quiz And Survey Master Published 12/13/2024 Severity Medium CVE-2024-8758Quiz and Survey Master (QSM) < 9.1.3 - Author+ Stored XSS Exploitation status Public exploit Fix Affected product Q Quiz and Survey Master (QSM) Published 09/23/2024 Severity Medium CVE-2024-6879Quiz and Survey Master (QSM) < 9.1.1 - Contributor+ Stored XSS Exploitation status Public exploit Fix Affected product Q Quiz and Survey Master (QSM) Published 08/26/2024 Severity Medium CVE-2024-6390Quiz and Survey Master (QSM) < 9.1.0 - Contributor+ Stored XSS Exploitation status Public exploit Fix Affected product Q Quiz and Survey Master (QSM) Published 08/03/2024 Severity Medium CVE-2024-6025Quiz and Survey Master < 9.0.5 - Contributor+ Stored XSS Exploitation status Public exploit Fix Affected product Q Quiz and Survey Master (QSM) Published 07/11/2024 Severity Medium CVE-2024-5606Quiz And Survey Master < 9.0.2 - Contributor+ SQLi Exploitation status Public exploit Fix Affected product Q Quiz and Survey Master (QSM) Published 07/02/2024 Severity High CVE-2024-4934Quiz And Survey Master < 9.0.2 - Contributor+ Stored XSS Exploitation status Public exploit Fix Affected product Q Quiz and Survey Master (QSM) Published 07/01/2024 Severity Medium CVE-2023-51507WordPress Quiz And Survey Master plugin <= 8.1.16 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product Q Quiz And Survey Master Published 06/14/2024 Severity Medium CVE-2024-3592Quiz And Survey Master – Best Quiz, Exam and Survey Plugin for WordPress <= 9.0.1 - Authenticated (Contributor+) SQL Injection Exploitation status Not known exploited Fix Affected product Q Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker Published 06/07/2024 Severity Critical CVE-2023-28787WordPress Quiz And Survey Master plugin <= 8.1.4 - Unauthenticated SQL Injection vulnerability Exploitation status Not known exploited Fix Affected product Q Quiz And Survey Master Published 03/26/2024 Severity Critical CVE-2024-27966WordPress Quiz And Survey Master plugin <= 8.2.2 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product Q Quiz And Survey Master Published 03/21/2024 Severity Medium CVE-2023-51521WordPress Quiz And Survey Master plugin <= 8.1.18 - Cross Site Request Forgery (CSRF) vulnerability Exploitation status Not known exploited Fix Affected product Q Quiz And Survey Master Published 03/16/2024 Severity Medium CVE-2023-47834WordPress Quiz And Survey Master Plugin <= 8.1.13 is vulnerable to Cross Site Scripting (XSS) Exploitation status Not confirmed Fix Affected product Q Quiz And Survey Master Published 11/22/2023 Severity Medium CVE-2023-26524WordPress Quiz And Survey Master Plugin <= 8.0.10 is vulnerable to Cross Site Request Forgery (CSRF) Exploitation status Not known exploited Fix Affected product Q Quiz And Survey Master – Best Quiz, Exam and Survey Plugin for WordPress Published 11/12/2023 Severity Medium CVE-2023-3575Quiz And Survey Master < 8.1.11 - Contributor+ Stored XSS Exploitation status Public exploit Fix Affected product Q Quiz And Survey Master Published 08/07/2023 Severity Medium CVE-2023-0292Quiz And Survey Master <= 8.0.8 - Cross-Site Request Forgery to Arbitrary Media Deletion Exploitation status Not known exploited Fix Affected product Q Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker Published 06/09/2023 Severity Medium CVE-2023-0291Quiz And Survey Master <= 8.0.8 - Unauthenticated Arbitrary Media Deletion Exploitation status Not known exploited Fix Affected product Q Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker Published 06/09/2023 Severity High CVE-2022-46862WordPress Quiz And Survey Master Plugin <= 8.0.7 is vulnerable to Cross Site Request Forgery (CSRF) Exploitation status Not known exploited Fix Affected product Q Quiz And Survey Master – Best Quiz, Exam and Survey Plugin for WordPress Published 02/14/2023 Severity Medium CVE-2022-4033Quiz and Survey Master <= 8.0.4 - Improper Input Validation Exploitation status Not known exploited Fix Affected product Q Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker Published 11/29/2022 Severity Medium CVE-2022-4032Quiz and Survey Master <= 8.0.4 - Unauthenticated iFrame Injection via Paragraph and Short Answer Exploitation status Not known exploited Fix Affected product Q Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker Published 11/29/2022 Severity High CVE-2022-42883WordPress Quiz And Survey Master plugin <= 7.3.10 - Sensitive Information Disclosure vulnerability Exploitation status Not known exploited Fix Affected product Q Quiz And Survey Master (WordPress plugin) Published 11/18/2022 Severity Medium CVE-2022-40698WordPress Quiz And Survey Master plugin <= 7.3.10 - Cross-Site Scripting (XSS) vulnerability Exploitation status Not confirmed Fix Affected product Q Quiz And Survey Master (WordPress plugin) Published 11/18/2022 Severity Medium CVE-2022-41652WordPress Quiz And Survey Master plugin <= 7.3.10 - Bypass vulnerability Exploitation status Not known exploited Fix Affected product Q Quiz And Survey Master (WordPress plugin) Published 11/18/2022 Severity Medium CVE-2021-36905WordPress Quiz And Survey Master plugin <= 7.3.4 - Multiple Auth. Stored Cross-Site Scripting (XSS) vulnerabilities Exploitation status Not confirmed Fix Affected product Q Quiz And Survey Master (WordPress plugin) Published 11/17/2022 Severity Medium CVE-2021-36906WordPress Quiz And Survey Master plugin <= 7.3.6 - Multiple Insecure direct object references (IDOR) vulnerabilities Exploitation status Not known exploited Fix Affected product Q Quiz And Survey Master (WordPress plugin) Published 11/03/2022 Severity Low CVE-2021-36898WordPress Quiz And Survey Master plugin <= 7.3.4 - Auth. SQL Injection (SQLi) vulnerability Exploitation status Not known exploited Fix Affected product Q Quiz And Survey Master (WordPress plugin) Published 10/28/2022 Severity High CVE-2021-36864WordPress Quiz And Survey Master plugin <= 7.3.4 - Auth. Reflected Cross-Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product Q Quiz And Survey Master (WordPress plugin) Published 10/28/2022 Severity Low CVE-2021-36863WordPress Quiz And Survey Master plugin <= 7.3.4 - Auth. Stored Cross-Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product Q Quiz And Survey Master (WordPress plugin) Published 10/28/2022 Severity Medium CVE-2021-36865WordPress Quiz And Survey Master plugin <= 7.3.4 - Insecure direct object references (IDOR) vulnerability Exploitation status Not known exploited Fix Affected product Q Quiz And Survey Master (WordPress plugin) Published 09/30/2022 Severity Low CVE-2022-25602WordPress Responsive Menu plugin <= 4.1.7 - Nonce token leak leading to arbitrary file upload, theme deletion, plugin settings change vulnerability Exploitation status Not known exploited Fix Affected product R Responsive Menu (WordPress plugin) Published 03/18/2022 Severity High CVE-2022-0182Exploitation status Not confirmed Fix Not confirmed Affected product Q Quiz And Survey Master Published 01/17/2022 Severity Unknown CVE-2022-0181Exploitation status Not confirmed Fix Not confirmed Affected product Q Quiz And Survey Master Published 01/17/2022 Severity Unknown CVE-2022-0180Exploitation status Not confirmed Fix Not confirmed Affected product Q Quiz And Survey Master Published 01/17/2022 Severity Unknown CVE-2021-24691Quiz And Survey Master < 7.3.2 - Admin+ Stored Cross-Site Scripting Exploitation status Not confirmed Fix Affected product Q Quiz And Survey Master – Best Quiz, Exam and Survey Plugin for WordPress Published 10/11/2021 Severity Unknown CVE-2021-20792Exploitation status Not confirmed Fix Not confirmed Affected product Q Quiz And Survey Master Published 08/18/2021 Severity Unknown CVE-2021-24368Quiz And Survey Master < 7.1.18 - Reflected Cross-Site Scripting (XSS) Exploitation status Not confirmed Fix Affected product Q Quiz And Survey Master – Best Quiz, Exam and Survey Plugin for WordPress Published 06/20/2021 Severity Unknown CVE-2021-24221Quiz And Survey Master < 7.1.12 - Authenticated SQL injection via shortcode Exploitation status Not confirmed Fix Affected product Q Quiz And Survey Master – Best Quiz, Exam and Survey Plugin for WordPress Published 04/12/2021 Severity Unknown CVE-2021-24161Responsive Menu < 4.0.4 - CSRF to Arbitrary File Upload Exploitation status Not confirmed Fix Affected product R Responsive Menu – Create Mobile-Friendly Menu Published 04/05/2021 Severity Unknown CVE-2021-24160Responsive Menu 4.0.0 - 4.0.3 - Authenticated Arbitrary File Upload Exploitation status Not confirmed Fix Affected product R Responsive Menu – Create Mobile-Friendly Menu Published 04/05/2021 Severity Unknown CVE-2021-24162Responsive Menu < 4.0.4 - CSRF to Settings Update Exploitation status Not confirmed Fix Affected product R Responsive Menu – Create Mobile-Friendly Menu Published 04/05/2021 Severity Unknown CVE-2020-35949Exploitation status Not confirmed Fix Not confirmed Affected product Not confirmed Published 01/01/2021 Severity Critical CVE-2020-35951Exploitation status Not confirmed Fix Not confirmed Affected product Not confirmed Published 01/01/2021 Severity Critical CVE-2016-11085Exploitation status Not confirmed Fix Not confirmed Affected product Not confirmed Published 08/16/2020 Severity Unknown CVE-2019-17599Exploitation status Not confirmed Fix Not confirmed Affected product Not confirmed Published 12/13/2019 Severity Unknown CVE-2017-18513Exploitation status Not confirmed Fix Not confirmed Affected product Not confirmed Published 08/14/2019 Severity Unknown 
%20%E2%80%93%20Quiz%20Maker%20%26%20Survey%20Maker.svg){kind=icon}
%20%E2%80%93%20Easy%20Quiz%20and%20Survey%20Maker.svg){kind=icon}
.svg){kind=icon}
.svg){kind=icon}
.svg){kind=icon}
