Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker

Уязвимости

• CVE-2022-41652без авторизации≤ 7.3.10

  WordPress Quiz And Survey Master plugin <= 7.3.10 - Bypass vulnerability

  Критич. 9.8

• CVE-2023-28787без авторизации≤ 8.1.4

  WordPress Quiz And Survey Master plugin <= 8.1.4 - Unauthenticated SQL Injection vulnerability

  Критич. 9.3

• CVE-2023-0291без авторизации≤ 8.0.8

  Quiz And Survey Master <= 8.0.8 - Unauthenticated Arbitrary Media Deletion

  Критич. 9.1

• CVE-2023-26524без авторизации · нужен клик≤ 8.0.10

  WordPress Quiz And Survey Master Plugin <= 8.0.10 is vulnerable to Cross Site Request Forgery (CSRF)

  Высокий 8.8

• CVE-2022-46862без авторизации · нужен клик≤ 8.0.7

  WordPress Quiz And Survey Master Plugin <= 8.0.7 is vulnerable to Cross Site Request Forgery (CSRF)

  Высокий 8.8

• CVE-2022-0180без авторизации · нужен клик

  Cross-site request forgery (CSRF) vulnerability in Quiz And Survey Master versions prior to 7.3.7 allows a remote attacker to hijack the aut

  Высокий 8.8

• CVE-2021-36906высокие права≤ 7.3.6

  WordPress Quiz And Survey Master plugin <= 7.3.6 - Multiple Insecure direct object references (IDOR) vulnerabilities

  Высокий 8.8

• CVE-2025-67987нужен вход≤ 10.3.1

  WordPress Quiz And Survey Master plugin <= 10.3.1 - SQL Injection vulnerability

  Высокий 8.5

• CVE-2025-55708нужен вход≤ 10.2.4

  WordPress Quiz And Survey Master Plugin <= 10.2.4 - SQL Injection Vulnerability

  Высокий 8.5

• CVE-2026-65454участник+≤ 11.2.0

  WordPress Quiz And Survey Master plugin <= 11.2.0 - SQL Injection vulnerability

  Высокий 8.5

• CVE-2023-0292без авторизации · нужен клик≤ 8.0.8

  Quiz And Survey Master <= 8.0.8 - Cross-Site Request Forgery to Arbitrary Media Deletion

  Высокий 8.1

• CVE-2022-42883без авторизации≤ 7.3.10

  WordPress Quiz And Survey Master plugin <= 7.3.10 - Sensitive Information Disclosure vulnerability

  Высокий 7.5

• CVE-2021-36898нужен вход≤ 7.3.4

  WordPress Quiz And Survey Master plugin <= 7.3.4 - Auth. SQL Injection (SQLi) vulnerability

  Высокий 7.2

• CVE-2026-97289без авторизации · нужен клик≤ 11.2.6

  WordPress Quiz And Survey Master plugin <= 11.2.6 - Cross Site Scripting (XSS) vulnerability

  Высокий 7.1

• CVE-2026-48867без авторизации · нужен клик≤ 11.1.2

  WordPress Quiz And Survey Master plugin <= 11.1.2 - Cross Site Scripting (XSS) vulnerability

  Высокий 7.1

• CVE-2026-40787без авторизации · нужен клик≤ 11.0.0

  WordPress Quiz And Survey Master plugin <= 11.0.0 - Cross Site Scripting (XSS) vulnerability

  Высокий 7.1

• CVE-2025-9637без авторизации≤ 10.3.1

  Quiz and Survey Master (QSM) <= 10.3.1 - Missing Authorization to Unpublished, Private And Password-Protected Quiz Information Disclosure And Image Response Upl

  Средний 6.5

• CVE-2025-9318подписчик+≤ 10.3.1

  Quiz and Survey Master (QSM) <= 10.3.1 - Authenticated (Subscriber+) SQL Injection via `is_linking` Query Parameter

  Средний 6.5

• CVE-2026-15963участник+≤ 11.2.1

  Quiz and Survey Master (QSM) <= 11.2.1 - Authenticated (Contributor+) SQL Injection via 'randon_category' Quiz Option

  Средний 6.5

• CVE-2026-13767автор+≤ 11.2.0

  Quiz and Survey Master (QSM) <= 11.2.0 - Authenticated (Custom+) SQL Injection via 'pages' Parameter

  Средний 6.5

• CVE-2026-2412участник+≤ 10.3.5

  Quiz and Survey Master (QSM) <= 10.3.5 - Authenticated (Contributor+) SQL Injection via 'merged_question' Parameter

  Средний 6.5

• CVE-2024-3592участник+≤ 9.0.1

  Quiz And Survey Master – Best Quiz, Exam and Survey Plugin for WordPress <= 9.0.1 - Authenticated (Contributor+) SQL Injection

  Средний 6.5

• CVE-2026-11780участник+≤ 11.2.1

  Quiz and Survey Master (QSM) <= 11.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'question_title' Parameter

  Средний 6.4

• CVE-2022-4032без авторизации≤ 8.0.4

  Quiz and Survey Master <= 8.0.4 - Unauthenticated iFrame Injection via Paragraph and Short Answer

  Средний 6.1

• CVE-2022-0181без авторизации · нужен клик

  Reflected cross-site scripting vulnerability in Quiz And Survey Master versions prior to 7.3.7 allows a remote attacker to inject an arbitra

  Средний 6.1

• CVE-2021-20792без авторизации · нужен клик

  Cross-site scripting vulnerability in Quiz And Survey Master versions prior to 7.1.14 allows a remote attacker to inject arbitrary script vi

  Средний 6.1

• CVE-2019-17599без авторизации · нужен клик

  The quiz-master-next (aka Quiz And Survey Master) plugin before 6.3.5 for WordPress is affected by: Cross Site Scripting (XSS).

  Средний 6.1

• CVE-2019-9575без авторизации · нужен клик

  The Quiz And Survey Master plugin 6.0.4 for WordPress allows wp-admin/admin.php?page=mlw_quiz_results quiz_id XSS.

  Средний 6.1

• CVE-2022-40698подписчик+≤ 7.3.10

  WordPress Quiz And Survey Master plugin <= 7.3.10 - Cross-Site Scripting (XSS) vulnerability

  Средний 6.1

• CVE-2024-27966высокие права≤ 8.2.2

  WordPress Quiz And Survey Master plugin <= 8.2.2 - Cross Site Scripting (XSS) vulnerability

  Средний 5.9

• CVE-2023-51521без авторизации · нужен клик≤ 8.1.18

  WordPress Quiz And Survey Master plugin <= 8.1.18 - Cross Site Request Forgery (CSRF) vulnerability

  Средний 5.4

• CVE-2023-47834нужен вход≤ 8.1.13

  WordPress Quiz And Survey Master Plugin <= 8.1.13 is vulnerable to Cross Site Scripting (XSS)

  Средний 5.4

• CVE-2022-0182нужен вход

  Stored cross-site scripting vulnerability in Quiz And Survey Master versions prior to 7.3.7 allows a remote authenticated attacker to inject

  Средний 5.4

• CVE-2021-36905участник+≤ 7.3.4

  WordPress Quiz And Survey Master plugin <= 7.3.4 - Multiple Auth. Stored Cross-Site Scripting (XSS) vulnerabilities

  Средний 5.4

• CVE-2021-36863участник+≤ 7.3.4

  WordPress Quiz And Survey Master plugin <= 7.3.4 - Auth. Stored Cross-Site Scripting (XSS) vulnerability

  Средний 5.4

• CVE-2021-36864редактор+≤ 7.3.4

  WordPress Quiz And Survey Master plugin <= 7.3.4 - Auth. Reflected Cross-Site Scripting (XSS) vulnerability

  Средний 5.4

• CVE-2026-62140без авторизации≤ 11.2.5

  WordPress Quiz And Survey Master plugin <= 11.2.5 - Insecure Direct Object References (IDOR) vulnerability

  Средний 5.3

• CVE-2026-5797без авторизации≤ 10.1.0

  Quiz and Survey Master (QSM) <= 11.1.0 - Unauthenticated Shortcode Injection Leading to Arbitrary Quiz Result Disclosure via Quiz Answer Text Input Fields

  Средний 5.3

• CVE-2026-25324без авторизации≤ 10.3.4

  WordPress Quiz And Survey Master plugin <= 10.3.4 - Insecure Direct Object References (IDOR) vulnerability

  Средний 5.3

• CVE-2025-63054без авторизации≤ 10.3.2

  WordPress Quiz And Survey Master plugin <= 10.3.2 - Broken Access Control vulnerability

  Средний 5.3

• CVE-2023-51507без авторизации≤ 8.1.16

  WordPress Quiz And Survey Master plugin <= 8.1.16 - Broken Access Control vulnerability

  Средний 5.3

• CVE-2022-4033без авторизации≤ 8.0.4

  Quiz and Survey Master <= 8.0.4 - Improper Input Validation

  Средний 5.3

• CVE-2026-6448админ≤ 11.1.2

  Quiz and Survey Master (QSM) <= 11.1.2 - Authenticated (Admin+) SQL Injection via 'order' and 'limit' Parameters

  Средний 4.9

• CVE-2026-25329нужен вход≤ 10.3.4

  WordPress Quiz And Survey Master plugin <= 10.3.4 - Broken Access Control vulnerability

  Средний 4.3

• CVE-2026-24358нужен вход≤ 10.3.3

  WordPress Quiz And Survey Master plugin <= 10.3.3 - Broken Access Control vulnerability

  Средний 4.3

• CVE-2025-9294подписчик+≤ 10.3.1

  Quiz And Survey Master <= 10.3.1 - Missing Authorization to Authenticated (Subscriber+) Quiz Results Deletion

  Средний 4.3

• CVE-2023-37984нужен вход≤ 8.1.10

  WordPress Quiz And Survey Master plugin <= 8.1.10 - Broken Access Control vulnerability

  Средний 4.3

• CVE-2026-9230участник+≤ 11.1.4

  Quiz and Survey Master (QSM) <= 11.1.4 - Missing Authorization to Authenticated (Contributor+) Arbitrary Quiz Modification and Email Reroute via Leaked Nonce fr

  Средний 4.3

• CVE-2026-9233участник+≤ 11.1.4

  Quiz and Survey Master (QSM) <= 11.1.4 - Missing Authorization to Authenticated (Contributor+) Arbitrary Modification via qsm_insert_quiz_template AJAX Action

  Средний 4.3

• CVE-2021-36865высокие права≤ 7.3.4

  WordPress Quiz And Survey Master plugin <= 7.3.4 - Insecure direct object references (IDOR) vulnerability

  Средний 4.3