Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker

Software Type	Plugin
Software Slug	quiz-master-next (view on wordpress.org)
Software Status	Active
Software Author	expresstech
Software Website	expresstech.io
Software Downloads	2,583,442
Software Active Installs	40,000
Software Record Last Updated	November 25, 2024

Showing 21-40 of 47 Vulnerabilities

Submit a Vulnerability

Quiz And Survey Master <= 7.3.10 - Cross-Site Request Forgery

8.8

CVE ID Unknown

Oct 23, 2022

Researchers:

Quiz And Survey Master <= 7.3.4 - Authenticated (Administrator+) SQL Injection

7.2

CVE-2021-36898

Oct 21, 2022

Researcher: RE-ALTER

Quiz And Survey Master <= 7.3.10 - Sensitive Information Disclosure

5.3

CVE-2022-42883

Oct 21, 2022

Researcher: Thura Moe Myint (mgthuramoemyint)

Quiz And Survey Master <= 7.3.6 - Insecure Direct Object Reference

5.4

CVE-2021-36906

Oct 21, 2022

Researcher: RE-ALTER

Quiz And Survey Master <= 7.3.10 - Unauthenticated Stored Cross-Site Scripting

7.2

CVE-2022-40698

Oct 21, 2022

Researcher: Thura Moe Myint (mgthuramoemyint)

Quiz And Survey Master <= 7.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting

6.4

CVE-2021-36863

Oct 21, 2022

Researcher: Ngo Van Thien

Quiz And Survey Master <= 7.3.4 - Multiple Authenticated (Contributor+) Stored Cross-Site Scripting

6.4

CVE-2021-36905

Oct 21, 2022

Researcher: RE-ALTER

Quiz And Survey Master <= 7.3.10 - Missing Authorization

4.3

CVE-2022-41652

Oct 21, 2022

Researcher: Thura Moe Myint (mgthuramoemyint)

Quiz And Survey Master <= 7.3.4 - Reflected Cross-Site Scripting

6.1

CVE-2021-36864

Oct 21, 2022

Researcher: Ngo Van Thien

Quiz And Survey Master – Best Quiz, Exam and Survey Plugin for WordPress <= 7.3.4 - Insecure Direct Object Reference

5.4

CVE-2021-36865

Sep 29, 2022

Researcher: Ngo Van Thien

Quiz And Survey Master <= 7.3.6 - Cross-Site Request Forgery

8.8

CVE-2022-0180

Jan 12, 2022

Researcher: Daiki Sueyoshi

Quiz And Survey Master <= 7.3.6 - Reflected Cross-Site Scripting

5.4

CVE-2022-0181

Jan 12, 2022

Researcher: Daiki Sueyoshi

Quiz And Survey Master <= 7.3.6 - Stored Cross-Site Scripting

5.4

CVE-2022-0182

Jan 12, 2022

Researcher: Tsutomu Aramaki

Quiz and Survey Master <= 7.1.13 - Cross-Site Scripting

6.1

CVE-2021-20792

Sep 13, 2021

Researcher: Gen Sato

Quiz And Survey Master <= 7.3.1 - Admin+ Stored Cross-Site Scripting

4.8

CVE-2021-24691

Sep 13, 2021

Researcher: Shivam Rai

Quiz and Survey Master <= 7.1.13 - SQL Injection

6.1

CVE ID Unknown

Aug 10, 2021

Researcher: Gen Sato

Quiz And Survey Master <= 7.1.17 - Reflected Cross-Site Scripting

6.1

CVE-2021-24368

Jun 3, 2021

Researcher: renniepak

Quiz And Survey Master <= 7.1.18 - Cross-Site Scripting

6.4

CVE ID Unknown

Jun 3, 2021

Researchers:

Quiz And Survey Master <= 7.1.11 - Authenticated SQL injection via shortcode

8.8

CVE-2021-24221

Mar 26, 2021

Researcher: Nguyen Van Khanh

Quiz and Survey Master <= 7.0.1 - Arbitrary File Upload

9.8

CVE ID Unknown

Aug 29, 2020

Researcher: Jerome Bruandet

Title	Status	CVE ID	CVSS	Researchers	Date
Quiz And Survey Master <= 7.3.10 - Cross-Site Request Forgery	Patched		8.8		October 23, 2022
Quiz And Survey Master <= 7.3.4 - Authenticated (Administrator+) SQL Injection	Patched	CVE-2021-36898	7.2	RE-ALTER	October 21, 2022
Quiz And Survey Master <= 7.3.10 - Sensitive Information Disclosure	Patched	CVE-2022-42883	5.3	Thura Moe Myint (mgthuramoemyint)	October 21, 2022
Quiz And Survey Master <= 7.3.6 - Insecure Direct Object Reference	Patched	CVE-2021-36906	5.4	RE-ALTER	October 21, 2022
Quiz And Survey Master <= 7.3.10 - Unauthenticated Stored Cross-Site Scripting	Patched	CVE-2022-40698	7.2	Thura Moe Myint (mgthuramoemyint)	October 21, 2022
Quiz And Survey Master <= 7.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting	Patched	CVE-2021-36863	6.4	Ngo Van Thien	October 21, 2022
Quiz And Survey Master <= 7.3.4 - Multiple Authenticated (Contributor+) Stored Cross-Site Scripting	Patched	CVE-2021-36905	6.4	RE-ALTER	October 21, 2022
Quiz And Survey Master <= 7.3.10 - Missing Authorization	Patched	CVE-2022-41652	4.3	Thura Moe Myint (mgthuramoemyint)	October 21, 2022
Quiz And Survey Master <= 7.3.4 - Reflected Cross-Site Scripting	Patched	CVE-2021-36864	6.1	Ngo Van Thien	October 21, 2022
Quiz And Survey Master – Best Quiz, Exam and Survey Plugin for WordPress <= 7.3.4 - Insecure Direct Object Reference	Patched	CVE-2021-36865	5.4	Ngo Van Thien	September 29, 2022
Quiz And Survey Master <= 7.3.6 - Cross-Site Request Forgery	Patched	CVE-2022-0180	8.8	Daiki Sueyoshi	January 12, 2022
Quiz And Survey Master <= 7.3.6 - Reflected Cross-Site Scripting	Patched	CVE-2022-0181	5.4	Daiki Sueyoshi	January 12, 2022
Quiz And Survey Master <= 7.3.6 - Stored Cross-Site Scripting	Patched	CVE-2022-0182	5.4	Tsutomu Aramaki	January 12, 2022
Quiz and Survey Master <= 7.1.13 - Cross-Site Scripting	Patched	CVE-2021-20792	6.1	Gen Sato	September 13, 2021
Quiz And Survey Master <= 7.3.1 - Admin+ Stored Cross-Site Scripting	Patched	CVE-2021-24691	4.8	Shivam Rai	September 13, 2021
Quiz and Survey Master <= 7.1.13 - SQL Injection	Patched		6.1	Gen Sato	August 10, 2021
Quiz And Survey Master <= 7.1.17 - Reflected Cross-Site Scripting	Patched	CVE-2021-24368	6.1	renniepak	June 3, 2021
Quiz And Survey Master <= 7.1.18 - Cross-Site Scripting	Patched		6.4		June 3, 2021
Quiz And Survey Master <= 7.1.11 - Authenticated SQL injection via shortcode	Patched	CVE-2021-24221	8.8	Nguyen Van Khanh	March 26, 2021
Quiz and Survey Master <= 7.0.1 - Arbitrary File Upload	Patched		9.8	Jerome Bruandet	August 29, 2020

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation