Harmonic Design
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| HD Quiz | 3 | – | Jun 27, 2026 |
| HD Quiz – Save Results Light | 1 | – | Nov 19, 2024 |
| HDForms | 1 | – | Jan 22, 2026 |
Exploited and recent CVEs
- CVE-2026-13422 HD Quiz 2.2.0 - 2.2.1 - Cross-Site Request Forgery via Multiple AJAX Handlers 0.3%
- CVE-2026-24544 WordPress HD Quiz plugin <= 2.0.9 - Broken Access Control vulnerability 0.2%
- CVE-2025-68912 WordPress HDForms plugin <= 1.6.1 - Arbitrary File Deletion vulnerability 0.6%
- CVE-2024-49689 WordPress HD Quiz – Save Results Light plugin <= 0.5 - Broken Access Control vulnerability 0.5%
- CVE-2024-22161 WordPress HD Quiz Plugin <= 1.8.11 is vulnerable to Cross Site Scripting (XSS) 0.3%