Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker

Information

Software Type Plugin
Software Slug quiz-master-next (view on wordpress.org)
Software Status Active
Software Author expresstech
Software Website expresstech.io
Software Downloads 2,580,771
Software Active Installs 40,000
Software Record Last Updated November 21, 2024

Showing 1-20 of 47 Vulnerabilities

Submit a Vulnerability
Quiz and Survey Master (QSM) <= 9.1.2 - Authenticated (Admin+) Stored Cross-Site Scripting
4.4
CVE-2024-8758
Sep 2, 2024
Researcher: Dmitrii Ignatyev
Quiz and Survey Master (QSM) <= 9.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2024-6879
Aug 5, 2024
Researcher: Bereket Miheret Alamneh
Quiz and Survey Master <= 9.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2024-6390
Jul 13, 2024
Researcher: Dmitrii Ignatyev
Quiz and Survey Master <= 9.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2024-6025
Jun 20, 2024
Researcher: Dmitrii Ignatyev
Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker <= 9.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2024-4934
Jun 10, 2024
Researcher: Krugov Artyom
Quiz And Survey Master – Best Quiz, Exam and Survey Plugin for WordPress <= 9.0.1 - Authenticated (Contributor+) SQL Injection
9.9
CVE-2024-3592
Jun 6, 2024
Researcher: Lucio Sá
Quiz And Survey Master <= 8.2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
4.4
CVE-2024-27966
Mar 13, 2024
Researcher: Marzieh Hashemi
Quiz And Survey Master <= 8.1.16 - Missing Authorization
5.3
CVE-2023-51507
Dec 27, 2023
Researcher: Brandon James Roldan (tomorrowisnew)
Quiz And Survey Master <= 8.1.18 - Cross-Site Request Forgery
4.3
CVE-2023-51521
Dec 27, 2023
Researcher: Brandon James Roldan (tomorrowisnew)
Quiz And Survey Master <= 8.1.13 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2023-47834
Nov 16, 2023
Researcher: emad
Quiz And Survey Master <= 8.1.15 - Cross-Site Request Forgery via 'display_results'
4.3
CVE ID Unknown
Sep 12, 2023
Researchers:
Quiz And Survey Master <= 8.1.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via Question Title
6.4
CVE-2023-3575
Jul 17, 2023
Researcher: Andreas Damen
Quiz And Survey Master <= 8.1.10 - Excessive Quiz Attempts
5.3
CVE-2023-37984
Jul 17, 2023
Researcher: qilin_99
Quiz and Survey Master <= 8.1.4 - Unauthenticated SQL Injection
9.8
CVE-2023-28787
Apr 16, 2023
Researcher: Rafie Muhammad
Quiz And Survey Master <= 8.0.10 - Cross-Site Request Forgery to Quiz Restoration
4.3
CVE-2023-26524
Feb 28, 2023
Researcher: Rio Darmawan
Quiz And Survey Master <= 8.0.8 - Unauthenticated Arbitrary Media Deletion
7.2
CVE-2023-0291
Feb 15, 2023
Researcher: Julien Ahrens
Quiz And Survey Master <= 8.0.8 - Cross-Site Request Forgery to Arbitrary Media Deletion
5.4
CVE-2023-0292
Feb 8, 2023
Researcher: Julien Ahrens
Quiz And Survey Master <= 8.0.7 - Cross-Site Request Forgery
4.3
CVE-2022-46862
Dec 16, 2022
Researcher: Oliver K.
Quiz and Survey Master <= 8.0.4 - Unauthenticated iFrame Injection via Paragraph and Short Answer
7.2
CVE-2022-4032
Nov 29, 2022
Researchers: Luca Greeb, Andreas Krüger
Quiz and Survey Master <= 8.0.4 - Improper Input Validation
5.3
CVE-2022-4033
Nov 16, 2022
Researchers: Luca Greeb, Andreas Krüger
Title Status CVE ID CVSS Researchers Date
Quiz and Survey Master (QSM) <= 9.1.2 - Authenticated (Admin+) Stored Cross-Site Scripting Patched CVE-2024-8758 4.4 Dmitrii Ignatyev September 2, 2024
Quiz and Survey Master (QSM) <= 9.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting Patched CVE-2024-6879 6.4 Bereket Miheret Alamneh August 5, 2024
Quiz and Survey Master <= 9.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting Patched CVE-2024-6390 6.4 Dmitrii Ignatyev July 13, 2024
Quiz and Survey Master <= 9.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting Patched CVE-2024-6025 6.4 Dmitrii Ignatyev June 20, 2024
Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker <= 9.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting Patched CVE-2024-4934 6.4 Krugov Artyom June 10, 2024
Quiz And Survey Master – Best Quiz, Exam and Survey Plugin for WordPress <= 9.0.1 - Authenticated (Contributor+) SQL Injection Patched CVE-2024-3592 9.9 Lucio Sá June 6, 2024
Quiz And Survey Master <= 8.2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting Patched CVE-2024-27966 4.4 Marzieh Hashemi March 13, 2024
Quiz And Survey Master <= 8.1.16 - Missing Authorization Patched CVE-2023-51507 5.3 Brandon James Roldan (tomorrowisnew) December 27, 2023
Quiz And Survey Master <= 8.1.18 - Cross-Site Request Forgery Patched CVE-2023-51521 4.3 Brandon James Roldan (tomorrowisnew) December 27, 2023
Quiz And Survey Master <= 8.1.13 - Authenticated (Contributor+) Stored Cross-Site Scripting Patched CVE-2023-47834 6.4 emad November 16, 2023
Quiz And Survey Master <= 8.1.15 - Cross-Site Request Forgery via 'display_results' Patched 4.3 September 12, 2023
Quiz And Survey Master <= 8.1.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via Question Title Patched CVE-2023-3575 6.4 Andreas Damen July 17, 2023
Quiz And Survey Master <= 8.1.10 - Excessive Quiz Attempts Patched CVE-2023-37984 5.3 qilin_99 July 17, 2023
Quiz and Survey Master <= 8.1.4 - Unauthenticated SQL Injection Patched CVE-2023-28787 9.8 Rafie Muhammad April 16, 2023
Quiz And Survey Master <= 8.0.10 - Cross-Site Request Forgery to Quiz Restoration Patched CVE-2023-26524 4.3 Rio Darmawan February 28, 2023
Quiz And Survey Master <= 8.0.8 - Unauthenticated Arbitrary Media Deletion Patched CVE-2023-0291 7.2 Julien Ahrens February 15, 2023
Quiz And Survey Master <= 8.0.8 - Cross-Site Request Forgery to Arbitrary Media Deletion Patched CVE-2023-0292 5.4 Julien Ahrens February 8, 2023
Quiz And Survey Master <= 8.0.7 - Cross-Site Request Forgery Patched CVE-2022-46862 4.3 Oliver K. December 16, 2022
Quiz and Survey Master <= 8.0.4 - Unauthenticated iFrame Injection via Paragraph and Short Answer Patched CVE-2022-4032 7.2 Luca Greeb, Andreas Krüger November 29, 2022
Quiz and Survey Master <= 8.0.4 - Improper Input Validation Patched CVE-2022-4033 5.3 Luca Greeb, Andreas Krüger November 16, 2022

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation