Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker — Plugin Vulnerabilities

N/A

2026-04-23< 11.1.0

Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker <= 11.0.0 - Unauthenticated Stored Cross-Site Scripting

Wordfence CVE

Medium 5.3

2026-04-17< 11.1.1

CVE-2026-5797

CVE Wordfence

N/A

2026-01-05< 10.3.2

Quiz and Survey Master (QSM) <= 10.3.1 - Missing Authorization to Unpublished, Private And Password-Protected Quiz Information Disclosure And Image Response Uploads

Wordfence CVE

N/A

2026-01-05< 10.3.2

Quiz and Survey Master (QSM) <= 10.3.1 - Authenticated (Subscriber+) SQL Injection via `is_linking` Query Parameter

Wordfence CVE

N/A

2026-01-05< 10.3.2

Quiz And Survey Master <= 10.3.1 - Missing Authorization to Authenticated (Subscriber+) Quiz Results Deletion

Wordfence CVE

N/A

2026-03-23< 11.0.0

Quiz and Survey Master (QSM) <= 10.3.5 - Authenticated (Contributor+) SQL Injection via 'merged_question' Parameter

Wordfence CVE

High 8.5

2026-02-20< 10.3.2

CVE-2025-67987

CVE Wordfence

Medium 4.3

2026-02-19< 10.3.5

CVE-2026-25329

CVE Wordfence

Medium 5.3

2026-02-19< 10.3.5

CVE-2026-25324

CVE Wordfence

Medium 4.3

2026-01-22< 10.3.4

CVE-2026-24358

CVE Wordfence

Medium 5.3

2025-12-09< 10.3.3

CVE-2025-63054

CVE Wordfence

Critical 9.8

2025-09-05< 10.2.6

CVE-2025-49401

CVE EUVD Wordfence

Medium 4.3

2025-08-14< 10.2.3

Quiz and Survey Master (QSM) <= 10.2.2 - Cross-Site Request Forgery to Template Creation

EUVD Wordfence CVE

High 8.5

2025-08-14< 10.2.5

CVE-2025-55708

CVE Wordfence EUVD

Medium 6.1

2025-03-25< 9.2.1

CVE-2024-10679

CVE Patchstack Wordfence

Medium 4.8

2024-09-23< 9.1.3

CVE-2024-8758

CVE Patchstack Wordfence

Medium 4.7

2024-08-26< 9.1.1

CVE-2024-6879

CVE Patchstack Wordfence

Medium 5.9

2024-08-05< 9.1.0

WordPress Quiz And Survey Master Plugin < 9.1.0 is vulnerable to Cross Site Scripting (XSS)

Patchstack CVE Wordfence

High 8.8

2024-07-02< 9.0.2

CVE-2024-5606

CVE

Medium 5.5

2024-07-01< 9.0.2

CVE-2024-4934

CVE Patchstack Wordfence

N/A

< 8.1.19

Quiz And Survey Master < 8.1.19 - Multiple Cross-Site Request Forgery

WPScan

Medium 5.4

2024-07-11< 9.0.5

CVE-2024-6025

CVE Patchstack Wordfence

Medium 6.5

2024-06-07< 9.0.2

CVE-2024-3592

CVE Patchstack Wordfence

Medium 5.9

2024-03-21< 8.2.3

CVE-2024-27966

CVE Wordfence Patchstack WPScan

N/A

< 8.1.16

Quiz And Survey Master < 8.1.16 - Cross-Site Request Forgery via 'display_results'

WPScan

Medium 5.3

2024-12-27< 8.1.17

WordPress Quiz And Survey Master Plugin <= 8.1.16 is vulnerable to Broken Access Control

Patchstack CVE Wordfence WPScan

Medium 5.4

2024-12-27< 8.1.19

WordPress Quiz And Survey Master Plugin <= 8.1.18 is vulnerable to Cross Site Request Forgery (CSRF)

Patchstack CVE Wordfence WPScan

Medium 6.5

2023-11-22< 8.1.14

CVE-2023-47834

CVE Patchstack Wordfence WPScan

N/A

2023-11-08< 8.1.19

Quiz And Survey Master <= 8.1.18 - Multiple Cross-Site Request Forgery

Wordfence

N/A

2023-09-13< 8.1.16

WordPress Quiz And Survey Master Plugin < 8.1.15 is vulnerable to Cross Site Request Forgery (CSRF)

Patchstack

N/A

2023-09-12< 8.1.16

Quiz And Survey Master <= 8.1.15 - Cross-Site Request Forgery via 'display_results'

Wordfence

N/A

< 4.4.4

Quiz And Survey Master < 4.4.4 - Authenticated Blind SQL Injection

WPScan

N/A

< 7.0.0

Quiz And Survey Master < 7.0.0 - Authenticated Stored Cross-Site Scripting (XSS)

WPScan

N/A

< 7.0.2

Quiz and Survey Master < 7.0.2 - Unauthenticated Arbitrary File Upload

WPScan

N/A

< 7.1.14

Quiz And Survey Master < 7.1.14 - Authenticated SQL injection via Rest API

WPScan

N/A

< 7.1.19

Quiz And Survey Master < 7.1.19 - Unauthenticated Stored Cross-Site Scripting (XSS)

WPScan

Medium 5.4

2023-08-07< 8.1.11

CVE-2023-3575

CVE Patchstack Wordfence WPScan

Medium 4.3

2024-12-13< 8.1.11

CVE-2023-37984

CVE Patchstack Wordfence

Critical 9.3

2024-03-26< 8.1.5

CVE-2023-28787

CVE Patchstack Wordfence

Medium 4.3

2023-11-12< 8.1.0

CVE-2023-26524

CVE Patchstack

N/A

2023-02-28< 8.1.0

Quiz And Survey Master <= 8.0.10 - Cross-Site Request Forgery to Quiz Restoration

Wordfence

Critical 9.1

2023-06-09< 8.0.9

CVE-2023-0291

CVE Patchstack Wordfence WPScan

High 8.1

2023-06-09< 8.0.9

CVE-2023-0292

CVE Wordfence

Medium 4.3

2023-02-14< 8.0.8

CVE-2022-46862

CVE Patchstack WPScan

N/A

2015-07-16< 4.4.4

Quiz And Survey Master < 4.4.4 - Multiple SQL Injections

Wordfence

N/A

2020-07-29< 7.0.0

Quiz and Survey Master <= 6.4.12 - Stored Cross-Site Scripting

Wordfence

N/A

2020-08-29< 7.0.2

Quiz and Survey Master <= 7.0.1 - Arbitrary File Upload

Wordfence

N/A

2021-06-03< 7.1.19

Quiz And Survey Master <= 7.1.18 - Cross-Site Scripting

Wordfence

N/A

2021-08-10< 7.1.14

Quiz and Survey Master <= 7.1.13 - SQL Injection

Wordfence

N/A

2022-12-16< 8.0.8

Quiz And Survey Master <= 8.0.7 - Cross-Site Request Forgery

Wordfence

N/A

2022-10-23< 7.3.11

Quiz And Survey Master <= 7.3.10 - Cross-Site Request Forgery

Wordfence

N/A

< 8.0.5

WordPress Quiz And Survey Master Plugin <= 8.0.4 is vulnerable to Other Vulnerability Type

Patchstack

N/A

< 8.0.5

WordPress Quiz And Survey Master Plugin <= 8.0.4 is vulnerable to Other Vulnerability Type

Patchstack

Medium 5.3

2022-11-29< 8.0.5

CVE-2022-4033

CVE Wordfence WPScan

Medium 6.1

2022-11-29< 8.0.5

CVE-2022-4032

CVE Wordfence WPScan

Medium 5.4

2022-11-17< 8.0.5

CVE-2021-36905

CVE Patchstack Wordfence WPScan

High 7.5

2022-10-28< 7.3.5

CVE-2021-36898

CVE Patchstack Wordfence WPScan

Medium 5.4

2022-10-28< 7.3.5

CVE-2021-36863

CVE Patchstack Wordfence WPScan

Low 3.4

2022-10-28< 7.3.5

CVE-2021-36864

CVE Patchstack Wordfence WPScan

Medium 5.4

2022-11-18< 7.3.11

CVE-2022-40698

CVE Patchstack Wordfence WPScan

Low 2.7

2022-11-03< 7.3.7

CVE-2021-36906

CVE Patchstack Wordfence WPScan

Medium 5.3

2022-11-18< 7.3.11

CVE-2022-42883

CVE Patchstack Wordfence WPScan

Medium 6.5

2022-11-18< 7.3.11

CVE-2022-41652

CVE Patchstack Wordfence WPScan

Low 3.8

2022-09-30< 7.3.5

CVE-2021-36865

CVE Patchstack Wordfence WPScan

N/A

2015-07-16< 4.4.4

WordPress Quiz And Survey Master Plugin <= 4.4.2 - Blind SQL Injection

Patchstack

N/A

2016-12-15< 4.7.9

WordPress Quiz And Survey Master Plugin <= 4.7.8 - Multiple Vulnerabilities

Patchstack

N/A

2020-08-29< 7.0.2

WordPress Quiz And Survey Master plugin <= 7.0.1 - Unauthenticated Arbitrary File Upload vulnerability

Patchstack

N/A

2021-03-26< 7.1.14

WordPress Quiz And Survey Master plugin <= 7.1.13 - Authenticated SQL injection (SQLi) vulnerability

Patchstack

N/A

2021-06-03< 7.1.19

WordPress Quiz And Survey Master plugin <= 7.1.18 - Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability

Patchstack

Medium 6.1

2019-03-12< 6.2.2

WordPress Quiz And Survey Master plugin <= 6.2.1 - Authenticated Cross-Site Scripting (XSS) vulnerability

Patchstack CVE Wordfence WPScan

Medium 6.1

2019-12-15< 6.3.5

WordPress Quiz And Survey Master plugin <= 6.3.4 - Authenticated Reflected Cross-Site Scripting (XSS) vulnerability

Patchstack CVE Wordfence WPScan

Medium 6.5

2020-08-16< 4.7.9

CVE-2016-11085

CVE Wordfence WPScan

Critical 9.9

2021-01-01< 7.0.1

CVE-2020-35951

CVE Wordfence WPScan

Critical 9.8

2021-01-01< 7.0.1

CVE-2020-35949

CVE Wordfence WPScan

High 8.8

2021-04-12< 7.1.12

CVE-2021-24221

CVE Wordfence WPScan

Medium 6.1

2021-06-20< 7.1.18

CVE-2021-24368

CVE Wordfence Patchstack WPScan

Medium 6.1

2025-10-03< 7.1.14

Quiz and Survey Master <= 7.1.13 - Cross-Site Scripting

EUVD Wordfence CVE JVN WPScan

Medium 4.8

2021-10-11< 7.3.2

CVE-2021-24691

CVE Patchstack Wordfence WPScan

Medium 5.4

2022-01-17< 7.3.7

CVE-2022-0182

CVE JVN Wordfence

Medium 6.1

2022-01-17< 7.3.7

CVE-2022-0181

CVE JVN Wordfence

High 8.8

2022-01-17< 7.3.7

CVE-2022-0180

CVE JVN Wordfence WPScan WPScan WPScan