Extension WordPress
Vulnérabilités Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker, page 4
Cette page rassemble les failles publiées pour Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker
67 fiches
Quiz and Survey Master <= 7.0.0 – Arbitrary File Upload
An issue was discovered in the Quiz and Survey Master plugin before 7.0.1 for WordPress. It made it possible for unauthenticated attackers to upload arbitrary files and achieve remote code execution. If a quiz question could be answered…
[*, 7.0.1)
7.0.1
03/08/2020
Quiz and Survey Master <= 7.0.0 – Unauthenticated Arbitrary File Deletion
An issue was discovered in the Quiz and Survey Master plugin before 7.0.1 for WordPress. It allows users to delete arbitrary files such as wp-config.php file, which could effectively take a site offline and allow an attacker to…
[*, 7.0.1)
7.0.1
03/08/2020
Quiz and Survey Master <= 6.4.12 – Stored Cross-Site Scripting
The Quiz and Survery Master plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the text editor and correct answer parameters in versions up to, and including, 6.4.12 due to insufficient input sanitization and output escaping. This…
*-6.4.12
7.0.0
29/07/2020
Quiz And Survey Master <= 6.3.4 – Reflected Cross-Site Scripting
The quiz-master-next (aka Quiz And Survey Master) plugin before 6.3.5 for WordPress is affected by: Cross Site Scripting (XSS). The impact is: Allows an attacker to execute arbitrary HTML and JavaScript code via the from or till parameter…
*-6.3.4
6.3.5
13/11/2019
Quiz And Survey Master <= 6.2.1 – Cross-Site Scripting
The Quiz And Survey Master plugin 6.2.1 for WordPress allows wp-admin/admin.php?page=mlw_quiz_results quiz_id XSS.
*-6.2.1
6.2.2
05/03/2019
Quiz And Survey Master <= 4.7.8 – Cross-Site Request Forgery to Stored Cross-Site Scripting
The Quiz And Survey Master plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.7.8. This is due to missing or incorrect nonce validation in the php/qmn_options_questions_tab.php file. This makes it possible…
[*, 4.7.9)
4.7.9
15/12/2016
Quiz And Survey Master < 4.4.4 – Multiple SQL Injections
The Quiz And Survey Master plugin for WordPress is vulnerable to Multiple SQL Injections via several parameters in versions before 4.4.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing…
[*, 4.4.4)
4.4.4
16/07/2015
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.