CVE-2025-67987: WordPress Quiz And Survey Master plugin <= 10.3.1 - SQL Injection vulnerability
Published Feb 20, 2026
·Updated
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ExpressTech Systems Quiz And Survey Master quiz-master-next allows SQL Injection.This issue affects Quiz And Survey Master: from n/a through <= 10.3.1.
Affected Software
2 affected components
ExpressTech Systems Quiz And Survey Master<=10.3.1
wordpress/quiz-master-next<=10.3.1
Event History
Feb 20, 2026
CVE Published
via MITRE·03:46 PM
Data Sourced
via MITRE·03:46 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·04:22 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-67987?
The severity of CVE-2025-67987 is high, rated at 8.5 on the CVSS scale.
2
How do I fix CVE-2025-67987?
To fix CVE-2025-67987, update the Quiz And Survey Master plugin to a version later than 10.3.1.
3
What type of vulnerability is CVE-2025-67987?
CVE-2025-67987 is an SQL Injection vulnerability.
4
Which software is affected by CVE-2025-67987?
CVE-2025-67987 affects the ExpressTech Systems Quiz And Survey Master plugin version 10.3.1 and earlier.
5
When was CVE-2025-67987 published?
CVE-2025-67987 was published on February 20, 2026.