Plugin icon

Quiz Maker

quiz-maker

Vulnerabilities:

30

Last Updated:

April 3, 2026

Active Installs:

20000

Published
Title
Fixed in
CVSS
Published
2026-02-19
Title
Quiz Maker < 6.7.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Fixed in
Fixed in 6.7.1.8
CVSS
6.4 (medium)
Published
2025-12-22
Title
Quiz Maker < 6.7.0.89 - Admin+ Stored XSS
Fixed in
Fixed in 6.7.0.89
CVSS
3.5 (low)
Published
2025-12-02
Title
Quiz Maker < 6.7.0.83 - Cross-Site Request Forgery
Fixed in
Fixed in 6.7.0.83
CVSS
4.3 (medium)
Published
2025-11-18
Title
Quiz Maker < 6.7.0.81 - Unauthenticated Sensitive Information Exposure
Fixed in
Fixed in 6.7.0.81
CVSS
5.3 (medium)
Published
2025-09-22
Title
Quiz Maker < 6.7.0.66 - Unauthenticated Sensitive Information Exposure
Fixed in
Fixed in 6.7.0.66
CVSS
5.3 (medium)
Published
2025-09-22
Title
Quiz Maker < 6.7.0.65 - Cross-Site Request Forgery
Fixed in
Fixed in 6.7.0.65
CVSS
4.3 (medium)
Published
2025-09-16
Title
Quiz Maker < 6.7.0.57 - Unauthenticated SQL Injection
Fixed in
Fixed in 6.7.0.57
CVSS
5.9 (medium)
Published
2025-03-29
Title
Quiz Maker < 6.6.8.8 - Unauthenticated SQL Injection
Fixed in
Fixed in 6.6.8.8
CVSS
7.5 (high)
Published
2025-01-25
Title
Quiz Maker Business, Developer, and Agency - Unauthenticated Arbitrary Shortcode Execution
Fixed in
Fixed in 21.8.0.100
CVSS
7.3 (high)
Published
2025-01-25
Title
Quiz Maker Business, Developer, and Agency - Unauthenticated SQL Injection via id
Fixed in
Fixed in 21.8.0.100
CVSS
8.6 (high)
Published
2025-01-25
Title
Quiz Maker Business, Developer, and Agency - Unauthenticated Arbitrary Shortcode Execution
Fixed in
Fixed in 8.8.0.100
CVSS
7.3 (high)
Published
2025-01-25
Title
Quiz Maker Business, Developer, and Agency - Unauthenticated Stored XSS
Fixed in
Fixed in 31.8.0.100
CVSS
7.2 (high)
Published
2025-01-25
Title
Quiz Maker Business, Developer, and Agency - Reflected DOM XSS via content
Fixed in
Fixed in 8.8.0.100
CVSS
7.1 (high)
Published
2025-01-25
Title
Quiz Maker Business, Developer, and Agency - Reflected DOM XSS via content
Fixed in
Fixed in 21.8.0.100
CVSS
7.1 (high)
Published
2025-01-25
Title
Quiz Maker Business, Developer, and Agency - Unauthenticated SQL Injection via id
Fixed in
Fixed in 31.8.0.100
CVSS
8.6 (high)
Published
2025-01-25
Title
Quiz Maker Business, Developer, and Agency - Unauthenticated Arbitrary Shortcode Execution
Fixed in
Fixed in 31.8.0.100
CVSS
7.3 (high)
Published
2025-01-25
Title
Quiz Maker Business, Developer, and Agency - Unauthenticated Stored XSS
Fixed in
Fixed in 8.8.0.100
CVSS
7.2 (high)
Published
2025-01-25
Title
Quiz Maker Business, Developer, and Agency - Unauthenticated Stored XSS
Fixed in
Fixed in 21.8.0.100
CVSS
7.2 (high)
Published
2025-01-25
Title
Quiz Maker Business, Developer, and Agency - Reflected DOM XSS via content
Fixed in
Fixed in 31.8.0.100
CVSS
7.1 (high)
Published
2025-01-25
Title
Quiz Maker Business, Developer, and Agency - Unauthenticated SQL Injection via id
Fixed in
Fixed in 8.8.0.100
CVSS
8.6 (high)
Published
2024-07-24
Title
Quiz Maker <= 6.5.9.8 - Admin+ Stored XSS
Fixed in
Fixed in 6.5.9.9
CVSS
3.5 (low)
Published
2024-06-24
Title
Quiz Maker < 6.5.8.4 - Unauthenticated SQL Injection via 'ays_questions' Parameter
Fixed in
Fixed in 6.5.8.4
CVSS
9.8 (critical)
Published
2024-02-06
Title
Quiz Maker < 6.5.2.5 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Quiz Creation & Modification
Fixed in
Fixed in 6.5.2.5
CVSS
4.3 (medium)
Published
2024-02-06
Title
Quiz Maker < 6.5.2.5 - Missing Authorization to Unauthenticated Quiz Data Retrieval
Fixed in
Fixed in 6.5.2.5
CVSS
5.3 (medium)
Published
2024-01-12
Title
Quiz Maker < 6.5.0.6 - Denial of Service
Fixed in
Fixed in 6.5.0.6
CVSS
5.3 (medium)
Published
2024-01-05
Title
Quiz Maker < 6.5.1.2 - Missing Authorization
Fixed in
Fixed in 6.5.1.2
CVSS
4.3 (medium)
Published
2023-11-30
Title
Quiz Maker < 6.4.9.5 - Reflected Cross-Site Scripting
Fixed in
Fixed in 6.4.9.5
CVSS
7.1 (high)
Published
2023-11-30
Title
Quiz Maker < 6.4.9.5 - Unauthenticated Email Address Disclosure
Fixed in
Fixed in 6.4.9.5
CVSS
5.3 (medium)
Published
2023-05-15
Title
Quiz Maker < 6.4.2.7 - Reflected XSS
Fixed in
Fixed in 6.4.2.7
CVSS
5.8 (medium)
Published
2021-06-29
Title
Quiz Maker < 6.2.0.9 - Multiple Authenticated Blind SQL Injections
Fixed in
Fixed in 6.2.0.9
CVSS
7.6 (high)