Log in Start free

ExpressTech

Products

ProductCVEsExploitedLatest
Quiz And Survey Master17–Oct 19, 2026
Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker13–Jul 3, 2026
Quiz And Survey Master (WordPress plugin)9–Nov 18, 2022
Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker4–Oct 10, 2026
Quiz And Survey Master – Best Quiz, Exam and Survey Plugin for WordPress3–Nov 12, 2023
Responsive Menu – Create Mobile-Friendly Menu3–Apr 5, 2021
Responsive Menu Pro3–Apr 5, 2021
Responsive Menu (WordPress plugin)1–Mar 18, 2022

Exploited and recent CVEs

  • CVE-2026-111408 High 8.8 WordPress Quiz And Survey Master plugin <= 11.2.7 - PHP Object Injection vulnerability 0.4%
  • CVE-2026-107862 Medium 6.5 WordPress Quiz And Survey Master plugin <= 11.2.7 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-96558 High 7.2 Quiz and Survey Master (QSM) <= 11.2.6 - Unauthenticated Stored DOM-Based Cross-Site Scripting via 'qsm_hidden_questions' Parameter 0.2%
  • CVE-2026-104392 High 8.8 WordPress Quiz And Survey Master plugin <= 11.2.7 - PHP Object Injection vulnerability 0.3%
  • CVE-2026-104391 Medium 6.5 WordPress Quiz And Survey Master plugin <= 11.2.7 - Cross Site Scripting (XSS) vulnerability 0.1%
  • CVE-2026-97289 High 7.1 WordPress Quiz And Survey Master plugin <= 11.2.6 - Cross Site Scripting (XSS) vulnerability 0.1%
  • CVE-2026-15963 Medium 6.5 Quiz and Survey Master (QSM) <= 11.2.1 - Authenticated (Contributor+) SQL Injection via 'randon_category' Quiz Option 0.5%
  • CVE-2026-11780 Medium 6.4 Quiz and Survey Master (QSM) <= 11.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'question_title' Parameter 0.4%
  • CVE-2026-13767 Medium 6.5 Quiz and Survey Master (QSM) <= 11.2.0 - Authenticated (Custom+) SQL Injection via 'pages' Parameter 0.4%
  • CVE-2026-9230 Medium 4.3 Quiz and Survey Master (QSM) <= 11.1.4 - Missing Authorization to Authenticated (Contributor+) Arbitrary Quiz Modification and Email Reroute via Leaked Nonce from /quiz/structure 0.5%
  • CVE-2026-9233 Medium 4.3 Quiz and Survey Master (QSM) <= 11.1.4 - Missing Authorization to Authenticated (Contributor+) Arbitrary Modification via qsm_insert_quiz_template AJAX Action 0.5%
  • CVE-2026-48867 High 7.1 WordPress Quiz And Survey Master plugin <= 11.1.2 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-40787 High 7.1 WordPress Quiz And Survey Master plugin <= 11.0.0 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-6448 Medium 4.9 Quiz and Survey Master (QSM) <= 11.1.2 - Authenticated (Admin+) SQL Injection via 'order' and 'limit' Parameters 0.4%
  • CVE-2026-5797 Medium 5.3 Quiz and Survey Master (QSM) <= 11.1.0 - Unauthenticated Shortcode Injection Leading to Arbitrary Quiz Result Disclosure via Quiz Answer Text Input Fields 0.5%
  • CVE-2026-2412 Medium 6.5 Quiz and Survey Master (QSM) <= 10.3.5 - Authenticated (Contributor+) SQL Injection via 'merged_question' Parameter 0.3%
  • CVE-2025-9318 Medium 6.5 Quiz and Survey Master (QSM) <= 10.3.1 - Authenticated (Subscriber+) SQL Injection via `is_linking` Query Parameter 0.3%
  • CVE-2025-9637 Medium 6.5 Quiz and Survey Master (QSM) <= 10.3.1 - Missing Authorization to Unpublished, Private And Password-Protected Quiz Information Disclosure And Image Response Uploads 0.3%
  • CVE-2025-9294 Medium 4.3 Quiz And Survey Master <= 10.3.1 - Missing Authorization to Authenticated (Subscriber+) Quiz Results Deletion 0.2%
  • CVE-2023-37984 Medium 4.3 WordPress Quiz And Survey Master plugin <= 8.1.10 - Broken Access Control vulnerability 0.5%
  • CVE-2023-51507 Medium 5.3 WordPress Quiz And Survey Master plugin <= 8.1.16 - Broken Access Control vulnerability 0.3%
  • CVE-2024-3592 Critical 9.9 Quiz And Survey Master – Best Quiz, Exam and Survey Plugin for WordPress <= 9.0.1 - Authenticated (Contributor+) SQL Injection 0.5%
  • CVE-2023-28787 Critical 9.3 WordPress Quiz And Survey Master plugin <= 8.1.4 - Unauthenticated SQL Injection vulnerability 2.0%
  • CVE-2024-27966 Medium 5.9 WordPress Quiz And Survey Master plugin <= 8.2.2 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2023-51521 Medium 5.4 WordPress Quiz And Survey Master plugin <= 8.1.18 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
  • CVE-2023-47834 Medium 6.5 WordPress Quiz And Survey Master Plugin <= 8.1.13 is vulnerable to Cross Site Scripting (XSS) 0.4%
  • CVE-2023-26524 Medium 4.3 WordPress Quiz And Survey Master Plugin <= 8.0.10 is vulnerable to Cross Site Request Forgery (CSRF) 0.3%
  • CVE-2023-0292 Medium 5.4 Quiz And Survey Master <= 8.0.8 - Cross-Site Request Forgery to Arbitrary Media Deletion 0.8%
  • CVE-2023-0291 High 7.2 Quiz And Survey Master <= 8.0.8 - Unauthenticated Arbitrary Media Deletion 2.0%
  • CVE-2022-46862 Medium 4.3 WordPress Quiz And Survey Master Plugin <= 8.0.7 is vulnerable to Cross Site Request Forgery (CSRF) 0.4%