ExpressTech Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker

CVE-2026-9230 Medium 4.3 Quiz and Survey Master (QSM) <= 11.1.4 - Missing Authorization to Authenticated (Contributor+) Arbitrary Quiz Modification and Email Reroute via Leaked Nonce from /quiz/structure 0.5%
CVE-2026-9233 Medium 4.3 Quiz and Survey Master (QSM) <= 11.1.4 - Missing Authorization to Authenticated (Contributor+) Arbitrary Modification via qsm_insert_quiz_template AJAX Action 0.5%
CVE-2026-6448 Medium 4.9 Quiz and Survey Master (QSM) <= 11.1.2 - Authenticated (Admin+) SQL Injection via 'order' and 'limit' Parameters 0.4%
CVE-2026-5797 Medium 5.3 Quiz and Survey Master (QSM) <= 11.1.0 - Unauthenticated Shortcode Injection Leading to Arbitrary Quiz Result Disclosure via Quiz Answer Text Input Fields 0.5%
CVE-2026-2412 Medium 6.5 Quiz and Survey Master (QSM) <= 10.3.5 - Authenticated (Contributor+) SQL Injection via 'merged_question' Parameter 0.3%
CVE-2025-9318 Medium 6.5 Quiz and Survey Master (QSM) <= 10.3.1 - Authenticated (Subscriber+) SQL Injection via `is_linking` Query Parameter 0.3%
CVE-2025-9637 Medium 6.5 Quiz and Survey Master (QSM) <= 10.3.1 - Missing Authorization to Unpublished, Private And Password-Protected Quiz Information Disclosure And Image Response Uploads 0.3%
CVE-2025-9294 Medium 4.3 Quiz And Survey Master <= 10.3.1 - Missing Authorization to Authenticated (Subscriber+) Quiz Results Deletion 0.2%
CVE-2024-3592 Critical 9.9 Quiz And Survey Master – Best Quiz, Exam and Survey Plugin for WordPress <= 9.0.1 - Authenticated (Contributor+) SQL Injection 0.5%
CVE-2023-0292 Medium 5.4 Quiz And Survey Master <= 8.0.8 - Cross-Site Request Forgery to Arbitrary Media Deletion 0.8%
CVE-2023-0291 High 7.2 Quiz And Survey Master <= 8.0.8 - Unauthenticated Arbitrary Media Deletion 2.0%
CVE-2022-4033 Medium 5.3 Quiz and Survey Master <= 8.0.4 - Improper Input Validation 0.8%
CVE-2022-4032 High 7.2 Quiz and Survey Master <= 8.0.4 - Unauthenticated iFrame Injection via Paragraph and Short Answer 0.8%