WordPress Vulnerability Scanner WPSec
Vulnerabilities / Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker

Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker vulnerabilities

Advisories WPSec published for Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker. Other sources may list more. Its attack surface: Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker on WPSec AttackSurface.

PublishedIDVulnerabilitySeverityFixed in
2026-10-06 WPSEC-2026-0466 Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker <= 11.2.7 - Unauthenticated Arbitrary Shortcode Execution via 'result_id' and 'qsm_unique_key' Parameters High 7.3 11.2.8
2026-10-06 WPSEC-2026-0465 Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker <= 11.2.7 - Authenticated (Contributor+) Insecure Direct Object Reference to Question Modification and Deletion Medium 5.4 11.2.8
2026-10-06 WPSEC-2026-0464 Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker <= 11.2.7 - Authenticated (Contributor+) PHP Object Injection via Quiz Settings High 7.5 11.2.8
2026-10-06 WPSEC-2026-0463 Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker <= 11.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Question Length Settings Medium 6.4 11.2.8
2026-10-02 WPSEC-2026-0297 Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker <= 11.2.6 - Unauthenticated Stored Cross-Site Scripting via 'qsm_hidden_questions' Parameter Medium 6.1 11.2.7

License: CC BY 4.0