Quiz And Survey Master Qsm (Unknown) - vulnerabilities (CVEs)
14 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2026-08-28. Vendor: Unknown.
CVEs of Quiz And Survey Master Qsm
- CVE-2026-79615 - CVSS 2.7 (low), 2026-08-28: The Quiz and Survey Master (QSM) WordPress plugin before 11.2.4 does not check authorisation when returning question bank entries through one of its REST API…
- CVE-2026-14826 - CVSS 2.7 (low), 2026-08-19: The Quiz and Survey Master (QSM) WordPress plugin before 11.2.4 does not perform a per-object ownership check on the REST routes that return a quiz's…
- CVE-2026-14825 - CVSS 2.7 (low), 2026-08-19: The Quiz and Survey Master (QSM) WordPress plugin before 11.2.4 does not perform a per-object ownership check before saving a quiz's front-end text settings,…
- CVE-2026-14824 - CVSS 4.8 (medium), 2026-08-04: The Quiz and Survey Master (QSM) WordPress plugin before 11.2.2 does not properly escape a question setting before outputting it into an unquoted HTML…
- CVE-2026-14821 - CVSS 2.7 (low), 2026-07-28: The Quiz and Survey Master (QSM) WordPress plugin before 11.1.5 does not perform a capability check before deleting output templates, allowing users with…
- CVE-2026-14820 - CVSS 5.3 (medium), 2026-07-27: The Quiz and Survey Master (QSM) WordPress plugin before 11.1.3 does not implement rate limiting or standard failed-login auditing on its front-end…
- CVE-2025-6790 - CVSS 4.3 (medium), 2025-08-14: The Quiz and Survey Master (QSM) WordPress plugin before 10.2.3 does not have CSRF check in place when updating its settings, which could allow attackers to…
- CVE-2024-10679 - CVSS 6.1 (medium), 2025-03-25: The Quiz and Survey Master (QSM) WordPress plugin before 9.2.1 does not sanitise and escape some of its settings, which could allow high privilege users such…
- CVE-2024-8758 - CVSS 4.8 (medium), 2024-09-23: The Quiz and Survey Master (QSM) WordPress plugin before 9.1.3 does not sanitise and escape some of its settings, which could allow high privilege users such…
- CVE-2024-6879 - CVSS 4.7 (medium), 2024-08-26: The Quiz and Survey Master (QSM) WordPress plugin before 9.1.1 fails to validate and escape certain Quiz fields before displaying them on a page or post where…
- CVE-2024-6390 - CVSS 5.9 (medium), 2024-08-03: The Quiz and Survey Master (QSM) WordPress plugin before 9.1.0 does not properly sanitise and escape some of its Quizz settings, which could allow high…
- CVE-2024-6025 - CVSS 6.5 (medium), 2024-07-11: The Quiz and Survey Master (QSM) WordPress plugin before 9.0.5 does not sanitise and escape some of its Quiz settings, which could allow contributors and…
- CVE-2024-5606 - CVSS 8.8 (high), 2024-07-02: The Quiz and Survey Master (QSM) WordPress plugin before 9.0.2 is vulnerable does not validate and escape the question_id parameter in the…
- CVE-2024-4934 - CVSS 5.5 (medium), 2024-07-01: The Quiz and Survey Master (QSM) WordPress plugin before 9.0.2 does not validate and escape some of its Quiz fields before outputting them back in a page/post…
