{"items":[{"id":"CVE-2026-111408","published":"2026-10-19T09:09:18.970Z","updated":"2026-10-19T17:17:55.950Z","title":"WordPress Quiz And Survey Master plugin <= 11.2.7 - PHP Object Injection vulnerability","severity":"HIGH","score":8.8,"vendor":"ExpressTech","product":"Quiz And Survey Master","kev":false,"epss":0.00352,"kevAdded":null},{"id":"CVE-2026-107862","published":"2026-10-12T17:13:40.320Z","updated":"2026-10-12T22:54:00.380Z","title":"WordPress Quiz And Survey Master plugin <= 11.2.7 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"ExpressTech","product":"Quiz And Survey Master","kev":false,"epss":0.00166,"kevAdded":null},{"id":"CVE-2026-96558","published":"2026-10-10T06:40:08.050Z","updated":"2026-10-11T12:23:56.142Z","title":"Quiz and Survey Master (QSM) <= 11.2.6 - Unauthenticated Stored DOM-Based Cross-Site Scripting via 'qsm_hidden_questions' Parameter","severity":"HIGH","score":7.2,"vendor":"expresstech","product":"Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker","kev":false,"epss":0.00241,"kevAdded":null},{"id":"CVE-2026-104392","published":"2026-10-09T12:08:37.866Z","updated":"2026-10-09T20:01:16.901Z","title":"WordPress Quiz And Survey Master plugin <= 11.2.7 - PHP Object Injection vulnerability","severity":"HIGH","score":8.8,"vendor":"ExpressTech","product":"Quiz And Survey Master","kev":false,"epss":0.00279,"kevAdded":null},{"id":"CVE-2026-104391","published":"2026-10-07T09:15:11.909Z","updated":"2026-10-07T10:09:59.457Z","title":"WordPress Quiz And Survey Master plugin <= 11.2.7 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":6.5,"vendor":"ExpressTech","product":"Quiz And Survey Master","kev":false,"epss":0.00127,"kevAdded":null},{"id":"CVE-2026-97289","published":"2026-09-30T12:28:20.861Z","updated":"2026-10-09T18:13:00.752Z","title":"WordPress Quiz And Survey Master plugin <= 11.2.6 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"ExpressTech","product":"Quiz And Survey Master","kev":false,"epss":0.00142,"kevAdded":null},{"id":"CVE-2026-15963","published":"2026-08-16T04:24:55.766Z","updated":"2026-08-17T17:14:43.984Z","title":"Quiz and Survey Master (QSM) <= 11.2.1 - Authenticated (Contributor+) SQL Injection via 'randon_category' Quiz Option","severity":"MEDIUM","score":6.5,"vendor":"expresstech","product":"Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker","kev":false,"epss":0.00451,"kevAdded":null},{"id":"CVE-2026-11780","published":"2026-08-16T04:24:53.383Z","updated":"2026-08-18T19:26:28.266Z","title":"Quiz and Survey Master (QSM) <= 11.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'question_title' Parameter","severity":"MEDIUM","score":6.4,"vendor":"expresstech","product":"Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker","kev":false,"epss":0.00419,"kevAdded":null},{"id":"CVE-2026-13767","published":"2026-07-16T07:51:01.744Z","updated":"2026-07-16T15:11:34.365Z","title":"Quiz and Survey Master (QSM) <= 11.2.0 - Authenticated (Custom+) SQL Injection via 'pages' Parameter","severity":"MEDIUM","score":6.5,"vendor":"expresstech","product":"Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker","kev":false,"epss":0.00413,"kevAdded":null},{"id":"CVE-2026-9230","published":"2026-07-03T06:50:11.170Z","updated":"2026-07-06T14:45:18.312Z","title":"Quiz and Survey Master (QSM) <= 11.1.4 - Missing Authorization to Authenticated (Contributor+) Arbitrary Quiz Modification and Email Reroute via Leaked Nonce from /quiz/structure","severity":"MEDIUM","score":4.3,"vendor":"expresstech","product":"Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker","kev":false,"epss":0.00491,"kevAdded":null},{"id":"CVE-2026-9233","published":"2026-06-27T06:50:57.158Z","updated":"2026-06-29T19:04:24.909Z","title":"Quiz and Survey Master (QSM) <= 11.1.4 - Missing Authorization to Authenticated (Contributor+) Arbitrary Modification via qsm_insert_quiz_template AJAX Action","severity":"MEDIUM","score":4.3,"vendor":"expresstech","product":"Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker","kev":false,"epss":0.00473,"kevAdded":null},{"id":"CVE-2026-48867","published":"2026-06-15T20:18:55.505Z","updated":"2026-06-16T17:10:55.903Z","title":"WordPress Quiz And Survey Master plugin <= 11.1.2 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"ExpressTech","product":"Quiz And Survey Master","kev":false,"epss":0.00175,"kevAdded":null},{"id":"CVE-2026-40787","published":"2026-06-15T20:18:23.530Z","updated":"2026-06-16T01:29:22.335Z","title":"WordPress Quiz And Survey Master plugin <= 11.0.0 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"ExpressTech","product":"Quiz And Survey Master","kev":false,"epss":0.00175,"kevAdded":null},{"id":"CVE-2026-6448","published":"2026-06-05T23:28:27.562Z","updated":"2026-06-06T11:48:49.465Z","title":"Quiz and Survey Master (QSM) <= 11.1.2 - Authenticated (Admin+) SQL Injection via 'order' and 'limit' Parameters","severity":"MEDIUM","score":4.9,"vendor":"expresstech","product":"Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker","kev":false,"epss":0.00352,"kevAdded":null},{"id":"CVE-2026-5797","published":"2026-04-17T05:29:26.679Z","updated":"2026-04-17T11:14:55.597Z","title":"Quiz and Survey Master (QSM) <= 11.1.0 - Unauthenticated Shortcode Injection Leading to Arbitrary Quiz Result Disclosure via Quiz Answer Text Input Fields","severity":"MEDIUM","score":5.3,"vendor":"expresstech","product":"Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker","kev":false,"epss":0.00519,"kevAdded":null},{"id":"CVE-2026-2412","published":"2026-03-23T22:25:39.767Z","updated":"2026-04-08T17:16:36.412Z","title":"Quiz and Survey Master (QSM) <= 10.3.5 - Authenticated (Contributor+) SQL Injection via 'merged_question' Parameter","severity":"MEDIUM","score":6.5,"vendor":"expresstech","product":"Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker","kev":false,"epss":0.0033,"kevAdded":null},{"id":"CVE-2025-9318","published":"2026-01-06T09:20:59.146Z","updated":"2026-04-08T17:30:10.903Z","title":"Quiz and Survey Master (QSM) <= 10.3.1 - Authenticated (Subscriber+) SQL Injection via `is_linking` Query Parameter","severity":"MEDIUM","score":6.5,"vendor":"expresstech","product":"Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker","kev":false,"epss":0.00258,"kevAdded":null},{"id":"CVE-2025-9637","published":"2026-01-06T09:20:58.732Z","updated":"2026-04-08T17:05:18.153Z","title":"Quiz and Survey Master (QSM) <= 10.3.1 - Missing Authorization to Unpublished, Private And Password-Protected Quiz Information Disclosure And Image Response Uploads","severity":"MEDIUM","score":6.5,"vendor":"expresstech","product":"Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker","kev":false,"epss":0.00267,"kevAdded":null},{"id":"CVE-2025-9294","published":"2026-01-06T08:21:49.006Z","updated":"2026-04-08T16:53:30.434Z","title":"Quiz And Survey Master <= 10.3.1 - Missing Authorization to Authenticated (Subscriber+) Quiz Results Deletion","severity":"MEDIUM","score":4.3,"vendor":"expresstech","product":"Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker","kev":false,"epss":0.00225,"kevAdded":null},{"id":"CVE-2023-37984","published":"2024-12-13T14:23:51.989Z","updated":"2026-04-28T16:08:33.218Z","title":"WordPress Quiz And Survey Master  plugin <= 8.1.10 - Broken Access Control vulnerability","severity":"MEDIUM","score":4.3,"vendor":"ExpressTech","product":"Quiz And Survey Master","kev":false,"epss":0.0047,"kevAdded":null},{"id":"CVE-2023-51507","published":"2024-06-14T01:01:47.258Z","updated":"2026-04-28T16:09:03.676Z","title":"WordPress Quiz And Survey Master plugin <= 8.1.16 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"ExpressTech","product":"Quiz And Survey Master","kev":false,"epss":0.00313,"kevAdded":null},{"id":"CVE-2024-3592","published":"2024-06-07T05:33:47.004Z","updated":"2026-04-08T17:34:39.949Z","title":"Quiz And Survey Master – Best Quiz, Exam and Survey Plugin for WordPress <= 9.0.1 - Authenticated (Contributor+) SQL Injection","severity":"CRITICAL","score":9.9,"vendor":"expresstech","product":"Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker","kev":false,"epss":0.00483,"kevAdded":null},{"id":"CVE-2023-28787","published":"2024-03-26T20:24:27.535Z","updated":"2026-04-28T16:08:16.811Z","title":"WordPress Quiz And Survey Master plugin <= 8.1.4 - Unauthenticated SQL Injection vulnerability","severity":"CRITICAL","score":9.3,"vendor":"ExpressTech","product":"Quiz And Survey Master","kev":false,"epss":0.0196,"kevAdded":null},{"id":"CVE-2024-27966","published":"2024-03-21T15:30:55.058Z","updated":"2026-04-28T16:09:14.653Z","title":"WordPress Quiz And Survey Master plugin <= 8.2.2 - Cross Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":5.9,"vendor":"ExpressTech","product":"Quiz And Survey Master","kev":false,"epss":0.00338,"kevAdded":null},{"id":"CVE-2023-51521","published":"2024-03-16T00:44:47.171Z","updated":"2026-04-28T16:09:03.713Z","title":"WordPress Quiz And Survey Master plugin <= 8.1.18 - Cross Site Request Forgery (CSRF) vulnerability","severity":"MEDIUM","score":5.4,"vendor":"ExpressTech","product":"Quiz And Survey Master","kev":false,"epss":0.00197,"kevAdded":null},{"id":"CVE-2023-47834","published":"2023-11-22T23:16:40.330Z","updated":"2026-04-28T16:08:52.733Z","title":"WordPress Quiz And Survey Master Plugin <= 8.1.13 is vulnerable to Cross Site Scripting (XSS)","severity":"MEDIUM","score":6.5,"vendor":"ExpressTech","product":"Quiz And Survey Master","kev":false,"epss":0.00385,"kevAdded":null},{"id":"CVE-2023-26524","published":"2023-11-12T23:55:18.599Z","updated":"2026-04-28T16:08:12.376Z","title":"WordPress Quiz And Survey Master Plugin <= 8.0.10 is vulnerable to Cross Site Request Forgery (CSRF)","severity":"MEDIUM","score":4.3,"vendor":"ExpressTech","product":"Quiz And Survey Master – Best Quiz, Exam and Survey Plugin for WordPress","kev":false,"epss":0.00309,"kevAdded":null},{"id":"CVE-2023-0292","published":"2023-06-09T05:33:32.758Z","updated":"2026-04-08T17:21:24.118Z","title":"Quiz And Survey Master <= 8.0.8 - Cross-Site Request Forgery to Arbitrary Media Deletion","severity":"MEDIUM","score":5.4,"vendor":"expresstech","product":"Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker","kev":false,"epss":0.00791,"kevAdded":null},{"id":"CVE-2023-0291","published":"2023-06-09T05:33:19.875Z","updated":"2026-04-08T16:58:23.299Z","title":"Quiz And Survey Master <= 8.0.8 - Unauthenticated Arbitrary Media Deletion","severity":"HIGH","score":7.2,"vendor":"expresstech","product":"Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker","kev":false,"epss":0.02034,"kevAdded":null},{"id":"CVE-2022-46862","published":"2023-02-14T11:26:14.262Z","updated":"2026-04-28T16:07:55.806Z","title":"WordPress Quiz And Survey Master Plugin <= 8.0.7 is vulnerable to Cross Site Request Forgery (CSRF)","severity":"MEDIUM","score":4.3,"vendor":"ExpressTech","product":"Quiz And Survey Master – Best Quiz, Exam and Survey Plugin for WordPress","kev":false,"epss":0.00384,"kevAdded":null},{"id":"CVE-2022-4033","published":"2022-11-29T20:25:26.881Z","updated":"2026-04-08T17:11:57.352Z","title":"Quiz and Survey Master <= 8.0.4 - Improper Input Validation","severity":"MEDIUM","score":5.3,"vendor":"expresstech","product":"Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker","kev":false,"epss":0.00758,"kevAdded":null},{"id":"CVE-2022-4032","published":"2022-11-29T20:23:15.308Z","updated":"2026-04-08T17:17:54.765Z","title":"Quiz and Survey Master <= 8.0.4 - Unauthenticated iFrame Injection via Paragraph and Short Answer","severity":"HIGH","score":7.2,"vendor":"expresstech","product":"Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker","kev":false,"epss":0.00815,"kevAdded":null},{"id":"CVE-2022-42883","published":"2022-11-18T21:46:42.880Z","updated":"2026-04-28T16:07:50.453Z","title":"WordPress Quiz And Survey Master plugin <= 7.3.10 - Sensitive Information Disclosure vulnerability","severity":"MEDIUM","score":5.3,"vendor":"ExpressTech","product":"Quiz And Survey Master (WordPress plugin)","kev":false,"epss":0.00736,"kevAdded":null},{"id":"CVE-2022-40698","published":"2022-11-18T21:45:19.326Z","updated":"2026-04-28T16:07:49.160Z","title":"WordPress Quiz And Survey Master plugin <= 7.3.10 - Cross-Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":5.4,"vendor":"ExpressTech","product":"Quiz And Survey Master (WordPress plugin)","kev":false,"epss":0.00464,"kevAdded":null},{"id":"CVE-2022-41652","published":"2022-11-18T18:32:08.699Z","updated":"2026-04-28T16:07:49.703Z","title":"WordPress Quiz And Survey Master plugin <= 7.3.10 - Bypass vulnerability","severity":"MEDIUM","score":6.5,"vendor":"ExpressTech","product":"Quiz And Survey Master (WordPress plugin)","kev":false,"epss":0.00763,"kevAdded":null},{"id":"CVE-2021-36905","published":"2022-11-17T22:02:18.619Z","updated":"2026-04-28T16:07:36.863Z","title":"WordPress Quiz And Survey Master plugin <= 7.3.4 - Multiple Auth. Stored Cross-Site Scripting (XSS) vulnerabilities","severity":"MEDIUM","score":5.4,"vendor":"ExpressTech","product":"Quiz And Survey Master (WordPress plugin)","kev":false,"epss":0.00483,"kevAdded":null},{"id":"CVE-2021-36906","published":"2022-11-03T19:33:45.799Z","updated":"2026-04-28T16:07:36.796Z","title":"WordPress Quiz And Survey Master plugin <= 7.3.6 - Multiple Insecure direct object references (IDOR) vulnerabilities","severity":"LOW","score":2.7,"vendor":"ExpressTech","product":"Quiz And Survey Master (WordPress plugin)","kev":false,"epss":0.00723,"kevAdded":null},{"id":"CVE-2021-36898","published":"2022-10-28T17:07:26.197Z","updated":"2026-04-28T16:07:36.795Z","title":"WordPress Quiz And Survey Master plugin <= 7.3.4 - Auth. SQL Injection (SQLi) vulnerability","severity":"HIGH","score":7.5,"vendor":"ExpressTech","product":"Quiz And Survey Master (WordPress plugin)","kev":false,"epss":0.01085,"kevAdded":null},{"id":"CVE-2021-36864","published":"2022-10-28T17:05:30.147Z","updated":"2026-04-28T16:07:35.292Z","title":"WordPress Quiz And Survey Master plugin <= 7.3.4 - Auth. Reflected Cross-Site Scripting (XSS) vulnerability","severity":"LOW","score":3.4,"vendor":"ExpressTech","product":"Quiz And Survey Master (WordPress plugin)","kev":false,"epss":0.0051,"kevAdded":null},{"id":"CVE-2021-36863","published":"2022-10-28T15:11:16.307Z","updated":"2026-04-28T16:07:35.348Z","title":"WordPress Quiz And Survey Master plugin <= 7.3.4 - Auth. Stored Cross-Site Scripting (XSS) vulnerability","severity":"MEDIUM","score":5.4,"vendor":"ExpressTech","product":"Quiz And Survey Master (WordPress plugin)","kev":false,"epss":0.00588,"kevAdded":null},{"id":"CVE-2021-36865","published":"2022-09-30T18:52:41.662Z","updated":"2026-04-28T16:07:35.611Z","title":"WordPress Quiz And Survey Master plugin <= 7.3.4 - Insecure direct object references (IDOR) vulnerability","severity":"LOW","score":3.8,"vendor":"ExpressTech","product":"Quiz And Survey Master (WordPress plugin)","kev":false,"epss":0.00514,"kevAdded":null},{"id":"CVE-2022-25602","published":"2022-03-18T18:00:26.675Z","updated":"2026-04-28T16:07:38.883Z","title":"WordPress Responsive Menu plugin <= 4.1.7 - Nonce token leak leading to arbitrary file upload, theme deletion, plugin settings change vulnerability","severity":"HIGH","score":8.3,"vendor":"ExpressTech","product":"Responsive Menu (WordPress plugin)","kev":false,"epss":0.01313,"kevAdded":null},{"id":"CVE-2022-0182","published":"2022-01-17T09:10:29.000Z","updated":"2024-08-02T23:18:42.473Z","title":"Stored cross-site scripting vulnerability in Quiz And Survey Master versions prior to 7.3.7 allows a remote authenticated attacker to inject an arbitrary…","severity":"MEDIUM","score":5.4,"vendor":"ExpressTech","product":"Quiz And Survey Master","kev":false,"epss":0.00974,"kevAdded":null},{"id":"CVE-2022-0181","published":"2022-01-17T09:10:27.000Z","updated":"2024-08-02T23:18:42.041Z","title":"Reflected cross-site scripting vulnerability in Quiz And Survey Master versions prior to 7.3.7 allows a remote attacker to inject an arbitrary script via…","severity":"MEDIUM","score":6.1,"vendor":"ExpressTech","product":"Quiz And Survey Master","kev":false,"epss":0.01277,"kevAdded":null},{"id":"CVE-2022-0180","published":"2022-01-17T09:10:26.000Z","updated":"2024-08-02T23:18:41.968Z","title":"Cross-site request forgery (CSRF) vulnerability in Quiz And Survey Master versions prior to 7.3.7 allows a remote attacker to hijack the authentication of…","severity":"HIGH","score":8.8,"vendor":"ExpressTech","product":"Quiz And Survey Master","kev":false,"epss":0.00654,"kevAdded":null},{"id":"CVE-2021-20792","published":"2021-08-18T05:36:26.000Z","updated":"2024-08-03T17:53:22.414Z","title":"Cross-site scripting vulnerability in Quiz And Survey Master versions prior to 7.1.14 allows a remote attacker to inject arbitrary script via unspecified…","severity":"MEDIUM","score":6.1,"vendor":"ExpressTech","product":"Quiz And Survey Master","kev":false,"epss":0.02915,"kevAdded":null},{"id":"CVE-2021-24368","published":"2021-06-20T12:31:32.000Z","updated":"2024-08-03T19:28:23.844Z","title":"Quiz And Survey Master < 7.1.18 - Reflected Cross-Site Scripting (XSS)","severity":"MEDIUM","score":6.1,"vendor":"ExpressTech","product":"Quiz And Survey Master – Best Quiz, Exam and Survey Plugin for WordPress","kev":false,"epss":0.00827,"kevAdded":null},{"id":"CVE-2021-24162","published":"2021-04-05T18:27:43.000Z","updated":"2024-08-03T19:21:18.635Z","title":"Responsive Menu < 4.0.4 - CSRF to Settings Update","severity":"HIGH","score":8.8,"vendor":"ExpressTech","product":"Responsive Menu – Create Mobile-Friendly Menu","kev":false,"epss":0.00796,"kevAdded":null},{"id":"CVE-2021-24161","published":"2021-04-05T18:27:43.000Z","updated":"2024-08-03T19:21:18.537Z","title":"Responsive Menu < 4.0.4 - CSRF to Arbitrary File Upload","severity":"HIGH","score":8.8,"vendor":"ExpressTech","product":"Responsive Menu – Create Mobile-Friendly Menu","kev":false,"epss":0.01249,"kevAdded":null},{"id":"CVE-2021-24160","published":"2021-04-05T18:27:43.000Z","updated":"2024-08-03T19:21:18.582Z","title":"Responsive Menu 4.0.0 - 4.0.3 - Authenticated Arbitrary File Upload","severity":"HIGH","score":8.8,"vendor":"ExpressTech","product":"Responsive Menu – Create Mobile-Friendly Menu","kev":false,"epss":0.08196,"kevAdded":null}]}