Skip to content
Noroxi

ExpressTech records

43 published records for vendor expresstech.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
3
With a fix record
23.3%
Median publish → KEV
No record has entered KEV

Records by year

  1. 19
  2. 20
  3. 21
  4. 22
  5. 23
  6. 24
  7. 25
  8. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

43 records
  • CVE-2020-35951
    62This week

    An issue was discovered in the Quiz and Survey Master plugin before 7.0.1 for WordPress.

    CriticalCVSS 9.9Proof of conceptEPSS 76%

    expresstech · quiz and survey masterJan 1, 2021

  • CVE-2020-35949
    41Plan

    An issue was discovered in the Quiz and Survey Master plugin before 7.0.1 for WordPress.

    CriticalCVSS 9.8No exploitEPSS 5%

    expresstech · quiz and survey masterJan 1, 2021

  • CVE-2022-41652
    39Monitor

    WordPress Quiz And Survey Master plugin <= 7.3.10 - Bypass vulnerability

    CriticalCVSS 9.8No exploitEPSS 0%

    expresstech · quiz and survey masterNov 18, 2022

  • CVE-2021-24160
    37Monitor

    Responsive Menu 4.0.0 - 4.0.3 - Authenticated Arbitrary File Upload

    HighCVSS 8.8Proof of conceptEPSS 8%

    expresstech · responsive menuApr 5, 2021

  • CVE-2023-0291
    37Monitor

    Quiz And Survey Master <= 8.0.8 - Unauthenticated Arbitrary Media Deletion

    CriticalCVSS 9.1No exploitEPSS 2%

    expresstech · quiz and survey masterJun 9, 2023

  • CVE-2021-24221
    36Monitor

    Quiz And Survey Master < 7.1.12 - Authenticated SQL injection via shortcode

    HighCVSS 8.8No exploitEPSS 1%

    expresstech · quiz and survey masterApr 12, 2021

  • CVE-2022-25602
    35Monitor

    WordPress Responsive Menu plugin <= 4.1.7 - Nonce token leak leading to arbitrary file upload, theme deletion, plugin settings change vulnerability

    HighCVSS 8.8No exploitEPSS 1%

    expresstech · responsive menuMar 18, 2022

  • CVE-2021-24161
    35Monitor

    Responsive Menu < 4.0.4 - CSRF to Arbitrary File Upload

    HighCVSS 8.8No exploitEPSS 1%

    expresstech · responsive menuApr 5, 2021

  • CVE-2021-24162
    35Monitor

    Responsive Menu < 4.0.4 - CSRF to Settings Update

    HighCVSS 8.8No exploitEPSS 0%

    expresstech · responsive menuApr 5, 2021

  • CVE-2022-0180
    35Monitor

    Cross-site request forgery (CSRF) vulnerability in Quiz And Survey Master versions prior to 7.3.7 allows a remote attacker to hijack the aut

    HighCVSS 8.8No exploitEPSS 0%

    expresstech · quiz and survey masterJan 17, 2022

  • CVE-2017-18513
    35Monitor

    The responsive-menu plugin before 3.1.4 for WordPress has no CSRF protection mechanism for the admin interface.

    HighCVSS 8.8No exploitEPSS 0%

    expresstech · responsive menuAug 14, 2019

  • CVE-2021-36906
    35Monitor

    WordPress Quiz And Survey Master plugin <= 7.3.6 - Multiple Insecure direct object references (IDOR) vulnerabilities

    HighCVSS 8.8No exploitEPSS 0%

    expresstech · quiz and survey masterNov 3, 2022

  • CVE-2024-5606
    35Monitor

    Quiz And Survey Master < 9.0.2 - Contributor+ SQLi

    HighCVSS 8.8No exploitEPSS 0%

    expresstech · quiz and survey masterJul 2, 2024

  • CVE-2022-46862
    35Monitor

    WordPress Quiz And Survey Master Plugin <= 8.0.7 is vulnerable to Cross Site Request Forgery (CSRF)

    HighCVSS 8.8No exploitEPSS 0%

    expresstech · quiz and survey masterFeb 14, 2023

  • CVE-2023-26524
    35Monitor

    WordPress Quiz And Survey Master Plugin <= 8.0.10 is vulnerable to Cross Site Request Forgery (CSRF)

    HighCVSS 8.8No exploitEPSS 0%

    expresstech · quiz and survey masterNov 12, 2023

  • CVE-2023-0292
    32Monitor

    Quiz And Survey Master <= 8.0.8 - Cross-Site Request Forgery to Arbitrary Media Deletion

    HighCVSS 8.1No exploitEPSS 0%

    expresstech · quiz and survey masterJun 9, 2023

  • CVE-2022-42883
    30Monitor

    WordPress Quiz And Survey Master plugin <= 7.3.10 - Sensitive Information Disclosure vulnerability

    HighCVSS 7.5No exploitEPSS 0%

    expresstech · quiz and survey masterNov 18, 2022

  • CVE-2021-36898
    28Monitor

    WordPress Quiz And Survey Master plugin <= 7.3.4 - Auth. SQL Injection (SQLi) vulnerability

    HighCVSS 7.2No exploitEPSS 0%

    expresstech · quiz and survey masterOct 28, 2022

  • CVE-2016-11085
    26Monitor

    php/qmn_options_questions_tab.php in the quiz-master-next plugin before 4.7.9 for WordPress allows CSRF, with resultant stored XSS, via the

    MediumCVSS 6.5No exploitEPSS 1%

    expresstech · quiz and survey masterAug 16, 2020

  • CVE-2024-3592
    26Monitor

    Quiz And Survey Master – Best Quiz, Exam and Survey Plugin for WordPress <= 9.0.1 - Authenticated (Contributor+) SQL Injection

    MediumCVSS 6.5No exploitEPSS 0%

    expresstech · quiz and survey masterJun 7, 2024

  • CVE-2025-9637
    26Monitor

    Quiz and Survey Master (QSM) <= 10.3.1 - Missing Authorization to Unpublished, Private And Password-Protected Quiz Information Disclosure And Image Response Upl

    MediumCVSS 6.5No exploitEPSS 0%

    expresstech · quiz and survey masterJan 6, 2026

  • CVE-2025-9318
    26Monitor

    Quiz and Survey Master (QSM) <= 10.3.1 - Authenticated (Subscriber+) SQL Injection via `is_linking` Query Parameter

    MediumCVSS 6.5No exploitEPSS 0%

    expresstech · quiz and survey masterJan 6, 2026

  • CVE-2021-20792
    25Monitor

    Cross-site scripting vulnerability in Quiz And Survey Master versions prior to 7.1.14 allows a remote attacker to inject arbitrary script vi

    MediumCVSS 6.1Proof of conceptEPSS 2%

    expresstech · quiz and survey masterAug 18, 2021

  • CVE-2019-17599
    24Monitor

    The quiz-master-next (aka Quiz And Survey Master) plugin before 6.3.5 for WordPress is affected by: Cross Site Scripting (XSS).

    MediumCVSS 6.1No exploitEPSS 1%

    expresstech · quiz and survey masterDec 13, 2019

  • CVE-2022-0181
    24Monitor

    Reflected cross-site scripting vulnerability in Quiz And Survey Master versions prior to 7.3.7 allows a remote attacker to inject an arbitra

    MediumCVSS 6.1No exploitEPSS 1%

    expresstech · quiz and survey masterJan 17, 2022