Extension WordPress
Vulnérabilités Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker, page 2
Cette page rassemble les failles publiées pour Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker
75 fiches
Quiz and Survey Master (QSM) <= 10.3.1 – Missing Authorization to Unpublished, Private And Password-Protected Quiz Information Disclosure And Image Response Uploads
The Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker plugin for WordPress is vulnerable to unauthorized access and modification of data due to a missing capability and status checks on multiple functions in all versions…
*-10.3.1
10.3.2
05/01/2026
Quiz and Survey Master (QSM) <= 10.3.1 – Authenticated (Subscriber+) SQL Injection via `is_linking` Query Parameter
The Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker plugin for WordPress is vulnerable to time-based SQL Injection via the ‘is_linking’ parameter in all versions up to, and including, 10.3.1 due to insufficient escaping on…
*-10.3.1
10.3.2
05/01/2026
Quiz And Survey Master <= 10.3.1 – Missing Authorization to Authenticated (Subscriber+) Quiz Results Deletion
The Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the qsm_dashboard_delete_result function in all versions up to, and…
*-10.3.1
10.3.2
05/01/2026
Quiz And Survey Master <= 10.3.2 – Missing Authorization
The Quiz And Survey Master plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in versions up to, and including, 10.3.2. This makes it possible for unauthenticated attackers to perform…
*-10.3.2
10.3.3
30/11/2025
Quiz And Survey Master <= 10.2.5 – Unauthenticated PHP Object Injection
The Quiz And Survey Master plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 10.2.5 via deserialization of untrusted input. This makes it possible for unauthenticated attackers to inject a PHP Object.…
*-10.2.5
10.2.6
03/09/2025
Quiz And Survey Master <= 10.2.4 – Authenticated (Contributor+) SQL Injection
The Quiz And Survey Master plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 10.2.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL…
*-10.2.4
10.2.5
14/08/2025
Quiz and Survey Master (QSM) <= 10.2.2 – Cross-Site Request Forgery to Template Creation
The Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 10.2.2. This is due to missing or incorrect nonce validation…
*-10.2.2
10.2.3
24/07/2025
Quiz and Survey Master (QSM) <= 9.2.0 – Authenticated (Admin+) Stored Cross-Site Scripting
The Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 9.2.0 due to insufficient input sanitization and…
*-9.2.0
9.2.1
11/03/2025
Quiz and Survey Master (QSM) <= 9.1.2 – Authenticated (Admin+) Stored Cross-Site Scripting
The Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 9.1.2 due to insufficient input sanitization and…
*-9.1.2
9.1.3
02/09/2024
Quiz and Survey Master (QSM) <= 9.1.0 – Authenticated (Contributor+) Stored Cross-Site Scripting
The Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the redirect URL in all versions up to, and including, 9.1.0 due to insufficient input sanitization…
*-9.1.0
9.1.1
05/08/2024
Quiz and Survey Master <= 9.0.5 – Authenticated (Contributor+) Stored Cross-Site Scripting
The Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Quiz retake button label in all versions up to, and including, 9.0.5 due to insufficient…
*-9.0.5
9.1.0
13/07/2024
Quiz and Survey Master <= 9.0.4 – Authenticated (Contributor+) Stored Cross-Site Scripting
The Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 9.0.4 due to insufficient input sanitization and output escaping. This…
*-9.0.4
9.0.5
20/06/2024
Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker <= 9.0.1 – Authenticated (Contributor+) Stored Cross-Site Scripting
The Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via quiz fields in all versions up to, and including, 9.0.1 due to insufficient input sanitization and…
*-9.0.1
9.0.2
10/06/2024
Quiz And Survey Master – Best Quiz, Exam and Survey Plugin for WordPress <= 9.0.1 – Authenticated (Contributor+) SQL Injection
The Quiz And Survey Master – Best Quiz, Exam and Survey Plugin for WordPress plugin for WordPress is vulnerable to SQL Injection via the 'question_id' parameter in all versions up to, and including, 9.0.1 due to insufficient escaping…
*-9.0.1
9.0.2
06/06/2024
Quiz And Survey Master <= 8.2.2 – Authenticated (Administrator+) Stored Cross-Site Scripting
The Quiz And Survey Master – Best Quiz, Exam and Survey Plugin for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 8.2.2 due to insufficient input…
*-8.2.2
8.2.3
13/03/2024
Quiz And Survey Master <= 8.1.16 – Missing Authorization
The Quiz And Survey Master plugin for WordPress is vulnerable to unauthorized access, modification or loss of data due to a missing capability check on one of its functions in versions up to, and including, 8.1.16. This makes…
*-8.1.16
8.1.17
27/12/2023
Quiz And Survey Master <= 8.1.18 – Cross-Site Request Forgery
The Quiz And Survey Master plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 8.1.18. This is due to missing or incorrect nonce validation on several functions. This makes it possible for…
*-8.1.18
8.1.19
27/12/2023
Quiz And Survey Master <= 8.1.13 – Authenticated (Contributor+) Stored Cross-Site Scripting
The Quiz And Survey Master – Best Quiz, Exam and Survey Plugin for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in all versions up to, and including, 8.1.13 due to insufficient…
*-8.1.13
8.1.14
16/11/2023
Quiz And Survey Master <= 8.1.15 – Cross-Site Request Forgery via 'display_results'
The Quiz And Survey Master plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 8.1.15. This is due to missing or incorrect nonce validation on the 'display_results' function. This makes it possible…
[*, 8.1.15)
8.1.16
12/09/2023
Quiz And Survey Master <= 8.1.10 – Excessive Quiz Attempts
The Quiz And Survey Master plugin for WordPress is vulnerable to exessive quiz attempts due to a missing validation checks on the ajax_submit_results() function in versions up to, and including, 8.1.10. This makes it possible for unauthenticated attackers…
*-8.1.10
8.1.11
17/07/2023
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.