WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
quiz-master-next
Published
2026-03-23
Title
Quiz and Survey Master (QSM) < 11.0.0 - Authenticated (Contributor+) SQL Injection via 'merged_question' Parameter
Slug
quiz-master-next
Published
2026-04-16
Title
Quiz and Survey Master (QSM) < 11.1.1 - Unauthenticated Shortcode Injection
Slug
quiz-master-next
Published
2026-04-23
Title
Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker < 11.1.0 - Unauthenticated Stored Cross-Site Scripting
Slug
quiz-master-next
Published
2026-02-05
Title
Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker < 10.3.5 - Missing Authorization
Slug
quiz-master-next
Published
2026-02-01
Title
Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker < 10.3.5 - Unauthenticated Insecure Direct Object Reference
Slug
quiz-master-next
Published
2026-06-03
Title
Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker < 11.1.3 - Unauthenticated Stored Cross-Site Scripting
Slug
quiz-master-next
Published
2026-06-05
Title
Quiz and Survey Master (QSM) < 11.1.3 - Authenticated (Admin+) SQL Injection via 'order' and 'limit' Parameters
Slug
quiz-master-next
Published
2026-06-26
Title
Quiz and Survey Master (QSM) < 11.1.5 - Missing Authorization to Authenticated (Contributor+) Arbitrary Modification via qsm_insert_quiz_template AJAX Action
Slug
quiz-master-next
Published
2026-07-02
Title
Quiz and Survey Master (QSM) < 11.1.5 - Missing Authorization to Authenticated (Contributor+) Arbitrary Quiz Modification and Email Reroute via Leaked Nonce from /quiz/structure
Slug
quiz-master-next
Published
2026-07-06
Title
Quiz And Survey Master < 11.1.3 - Unauthenticated User Enumeration and Password Oracle via Quiz Login
Slug
quiz-master-next
Published
2026-07-07
Title
Quiz And Survey Master < 11.1.5 - Contributor+ Arbitrary Template Deletion
Slug
quiz-master-next
Published
2026-07-15
Title
Quiz and Survey Master (QSM) < 11.2.1 - Authenticated (Custom+) SQL Injection via 'pages' Parameter
Slug
quiz-master-next
Published
2026-07-27
Title
Quiz And Survey Master < 11.2.2 - Contributor+ Stored XSS via Polar Question
Slug
quiz-master-next
Published
2026-07-22
Title
Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker < 11.2.1 - Authenticated (Contributor+) SQL Injection
Slug
quiz-master-next
Published
2026-08-15
Title
Quiz and Survey Master (QSM) < 11.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'question_title' Parameter
Slug
quiz-master-next
Published
2026-08-15
Title
Quiz and Survey Master (QSM) < 11.2.2 - Authenticated (Contributor+) SQL Injection via 'randon_category' Quiz Option
Slug
quiz-master-next
Published
2026-08-17
Title
Quiz And Survey Master < 11.2.4 - Contributor+ Cross-Quiz Email and Results Configuration Disclosure via IDOR
Slug
quiz-master-next
Published
2026-08-17
Title
Quiz And Survey Master < 11.2.4 - Contributor+ Arbitrary Quiz Text Settings Update via IDOR
Slug
quiz-master-next
Published
2026-08-26
Title
Quiz And Survey Master < 11.2.4 - Contributor+ Cross-Quiz Question Bank and Answer Key Disclosure via IDOR
Slug
quiz-organizer
Published
2025-02-25
Title
Quiz Organizer <= 2.9.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
quiz-tool-lite
Published
2021-10-11
Title
Quiz Tool Lite <= 2.3.15 - Multiple Admin+ Stored Cross-Site Scripting
Slug
quizlord
Published
2022-11-19
Title
Quizlord <= 2.0 - Admin+ Stored XSS
Slug
quizzin
Published
2025-02-16
Title
Quizzin <= 1.01.4 - Reflected Cross-Site Scripting
Slug
quote-comments
Published
2025-02-03
Title
Quote Comments <= 3.0.0 - Stored XSS via CSRF
Slug
quote-comments
Published
2026-01-06
Title
Quote Comments <= 3.0.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Settings Update