Extension WordPress
Vulnérabilités Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker
Cette page rassemble les failles publiées pour Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker
75 fiches
Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker < 11.2.4 – Authenticated (Contributor+) Insecure Direct Object Reference
The Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to 11.2.4. This is due to missing validation on a user controlled…
[*, 11.2.4)
11.2.4
28/08/2026
Quiz And Survey Master <= 11.2.3 – Authenticated (Contributor+) Insecure Direct Object Reference
The Quiz And Survey Master plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 11.2.3. This is due to missing validation on a user controlled key. This makes it possible for…
*-11.2.3
11.2.4
17/08/2026
Quiz And Survey Master <= 11.2.3 – Authenticated (Contributor+) Insecure Direct Object Reference
The Quiz And Survey Master plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 11.2.3. This is due to missing validation on a user controlled key. This makes it possible for…
*-11.2.3
11.2.4
17/08/2026
Quiz and Survey Master (QSM) <= 11.2.1 – Authenticated (Contributor+) SQL Injection via 'randon_category' Quiz Option
The Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker plugin for WordPress is vulnerable to generic SQL Injection via 'randon_category' Quiz Option in all versions up to, and including, 11.2.1 due to insufficient escaping on…
*-11.2.1
11.2.2
15/08/2026
Quiz and Survey Master (QSM) <= 11.2.1 – Authenticated (Contributor+) Stored Cross-Site Scripting via 'question_title' Parameter
The Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'question_title' parameter in all versions up to, and including, 11.2.1 due to insufficient input sanitization…
*-11.2.1
11.2.2
15/08/2026
Quiz And Survey Master <= 11.2.1 – Authenticated (Contributor+) Stored Cross-Site Scripting
The Quiz And Survey Master plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 11.2.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level…
*-11.2.1
11.2.2
27/07/2026
Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker <= 11.2.0 – Authenticated (Contributor+) SQL Injection
The Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 11.2.0 due to insufficient escaping on the user supplied parameter and lack…
*-11.2.0
11.2.1
22/07/2026
Quiz and Survey Master (QSM) <= 11.2.0 – Authenticated (Custom+) SQL Injection via 'pages' Parameter
The Quiz Master Next plugin for WordPress is vulnerable to SQL Injection via stored quiz page data in versions up to, and including, 11.2.0. This is due to insufficient escaping on the user-supplied 'pages' parameter persisted by the…
*-11.2.0
11.2.1
15/07/2026
Quiz And Survey Master <= 11.1.4 – Missing Authorization
The Quiz And Survey Master plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in versions up to, and including, 11.1.4. This makes it possible for authenticated attackers, with contributor-level…
*-11.1.4
11.1.5
07/07/2026
Quiz and Survey Master (QSM) <= 11.1.4 – Missing Authorization to Authenticated (Contributor+) Arbitrary Quiz Modification and Email Reroute via Leaked Nonce from /quiz/structure
The Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 11.1.4. This is due to the plugin not properly verifying that…
*-11.1.4
11.1.5
02/07/2026
Quiz and Survey Master (QSM) <= 11.1.4 – Missing Authorization to Authenticated (Contributor+) Arbitrary Modification via qsm_insert_quiz_template AJAX Action
The Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 11.1.4. This is due to the plugin not properly verifying that…
*-11.1.4
11.1.5
26/06/2026
Quiz and Survey Master (QSM) <= 11.1.2 – Authenticated (Admin+) SQL Injection via 'order' and 'limit' Parameters
The Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'order' parameter in all versions up to, and including, 11.1.2 due to insufficient escaping…
*-11.1.2
11.1.3
05/06/2026
Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker <= 11.1.2 – Unauthenticated Stored Cross-Site Scripting
The Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 11.1.2 due to insufficient input sanitization and output escaping. This makes…
*-11.1.2
11.1.3
03/06/2026
Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker <= 11.0.0 – Unauthenticated Stored Cross-Site Scripting
The Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 11.0.0 due to insufficient input sanitization and output escaping. This makes…
*-11.0.0
11.1.0
23/04/2026
Quiz and Survey Master (QSM) <= 11.1.0 – Unauthenticated Shortcode Injection Leading to Arbitrary Quiz Result Disclosure via Quiz Answer Text Input Fields
The Quiz And Survey Master plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in versions up to and including 11.1.0. This is due to insufficient input sanitization and the execution of do_shortcode() on user-submitted quiz answer text.…
*-10.1.0
11.1.1
16/04/2026
Quiz and Survey Master (QSM) <= 10.3.5 – Authenticated (Contributor+) SQL Injection via 'merged_question' Parameter
The Quiz and Survey Master (QSM) plugin for WordPress is vulnerable to SQL Injection via the 'merged_question' parameter in all versions up to, and including, 10.3.5. This is due to insufficient sanitization of user-supplied input before being used…
*-10.3.5
11.0.0
23/03/2026
Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker <= 10.3.4 – Missing Authorization
The Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 10.3.4. This…
*-10.3.4
10.3.5
05/02/2026
Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker <= 10.3.4 – Unauthenticated Insecure Direct Object Reference
The Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 10.3.4 due to missing validation on a user controlled…
*-10.3.4
10.3.5
01/02/2026
Quiz And Survey Master <= 10.3.1 – Authenticated (Subscriber+) SQL Injection
The Quiz And Survey Master plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 10.3.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL…
*-10.3.1
10.3.2
28/01/2026
Quiz And Survey Master <= 10.3.3 – Missing Authorization
The Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 10.3.3. This…
*-10.3.3
10.3.4
08/01/2026
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.