quiz and survey master

Security Risk Profile

/100

low

Security Risk Score

Comprehensive risk assessment based on 8 vulnerabilities, EPSS scores, exploitation status, and remediation availability.

📅 Data spans from July 1, 2024 to present

Total CVEs

Critical+High

Exploited

Unpatched

Threat Assessment

Avg CVSS

5.3

Base severity

Avg EPSS

Exploit probability

Unpatched

Critical/High

Risk Level

22/100

low

Severity Distribution

Critical

High

Medium

Low

Exploit Likelihood

>50% chance

20-50%

5-20%

<5%

Age Distribution

Common Weaknesses (CWE)

XSS

SQL Injection

CSRF

Most Affected Products

1. Quiz and Survey Master QSM4

2. ExpressTech Quiz And Survey Master Wordpress4

3. Quiz and Survey Master Quiz and Survey Master2

4. Quiz and Survey Master Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker plugin for WordPress1

5. Quiz and Survey Master Quiz and Survey Master (WordPress plugin)1

Recent Vulnerabilities

See more →

CVE-2026-9233

CVSS 4.3EPSS 0%medium

Quiz and Survey Master (QSM) <= 11.1.4 - Missing Authorization to Authenticated (Contributor+) Arbitrary Modification via qsm_insert_quiz_template AJAX Action

Jun 27, 2026🔧 No Patch

CVE-2026-5797

CVSS 5.3EPSS 0%medium

Quiz and Survey Master (QSM) <= 11.1.0 - Unauthenticated Shortcode Injection Leading to Arbitrary Quiz Result Disclosure via Quiz Answer Text Input Fields

Apr 17, 2026🔧 No Patch

CVE-2026-2412

CVSS 6.5medium

Quiz and Survey Master (QSM) <= 10.3.5 - Authenticated (Contributor+) SQL Injection via 'merged_question' Parameter

Mar 23, 2026🔧 No Patch

CVE-2025-6790

CVSS 4.3medium

QSM < 10.2.3 - Template Creation via CSRF

Aug 14, 2025🔧 No Patch

CVE-2024-10679

CVSS 6.1medium

Quiz and Survey Master (QSM) < 9.2.1 - Author+ Stored XSS