WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
quiz-master-next
Published
2026-01-28
Title
Quiz And Survey Master < 10.3.2 - Authenticated (Subscriber+) SQL Injection
Slug
quiz-master-next
Published
2026-01-08
Title
Quiz And Survey Master < 10.3.4 - Missing Authorization
Slug
quiz-master-next
Published
2026-03-23
Title
Quiz and Survey Master (QSM) < 11.0.0 - Authenticated (Contributor+) SQL Injection via 'merged_question' Parameter
Slug
quiz-master-next
Published
2026-04-16
Title
Quiz and Survey Master (QSM) < 11.1.1 - Unauthenticated Shortcode Injection
Slug
quiz-master-next
Published
2026-04-23
Title
Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker < 11.1.0 - Unauthenticated Stored Cross-Site Scripting
Slug
quiz-master-next
Published
2026-02-05
Title
Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker < 10.3.5 - Missing Authorization
Slug
quiz-master-next
Published
2026-02-01
Title
Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker < 10.3.5 - Unauthenticated Insecure Direct Object Reference
Slug
quiz-organizer
Published
2025-02-25
Title
Quiz Organizer <= 2.9.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
quiz-tool-lite
Published
2021-10-11
Title
Quiz Tool Lite <= 2.3.15 - Multiple Admin+ Stored Cross-Site Scripting
Slug
quizlord
Published
2022-11-19
Title
Quizlord <= 2.0 - Admin+ Stored XSS
Slug
quizzin
Published
2025-02-16
Title
Quizzin <= 1.01.4 - Reflected Cross-Site Scripting
Slug
quote-comments
Published
2025-02-03
Title
Quote Comments <= 3.0.0 - Stored XSS via CSRF
Slug
quote-comments
Published
2026-01-06
Title
Quote Comments <= 3.0.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Settings Update
Slug
quote-master
Published
2026-01-16
Title
Quote Master <= 7.1.1 - Reflected Cross-Site Scripting
Slug
quote-me
Published
2025-01-16
Title
Quote me <= 1.0 - Reflected Cross-Site Scripting
Slug
quote-o-matic
Published
2022-12-12
Title
Quote-O-Matic <= 1.0.5 - Admin+ SQLi
Slug
quote-post-type-plugin
Published
2025-01-16
Title
quote-posttype-plugin <= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
quote-press
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
quote-press
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
quote-requests-for-woocommerce
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
quote-requests-for-woocommerce
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
quote-tweet
Published
2025-01-07
Title
Quote Tweet <= 0.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
quotemedia-tools
Published
2025-01-16
Title
QuoteMedia Tools <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
quotes-and-tips
Published
2015-10-03
Title
Quotes And Tips <= 1.19 - Cross-Site Scripting (XSS)
Slug
quotes-and-tips
Published
2017-04-12
Title
Multiple BestWebSoft Plugins - Authenticated Cross-Site Scripting (XSS)