Advisories · Technology

ExpressTech Quiz And Survey Master.

Every CVE that names ExpressTech Quiz And Survey Master among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-111408 CVE record

CVSS 8.8 High

WordPress Quiz And Survey Master plugin <= 11.2.7 - PHP Object Injection vulnerability
- ExpressTech Quiz And Survey Master
- Insecure deserialization
Not analysed yet 19 Oct 2026
CVE-2026-107862 CVE record

CVSS 6.5 Medium

WordPress Quiz And Survey Master plugin <= 11.2.7 - Cross Site Scripting (XSS) vulnerability
- ExpressTech Quiz And Survey Master
- Cross-site scripting (XSS)
Not analysed yet 12 Oct 2026
CVE-2026-104392 CVE record

CVSS 8.8 High

WordPress Quiz And Survey Master plugin <= 11.2.7 - PHP Object Injection vulnerability
- ExpressTech Quiz And Survey Master
- Insecure deserialization
Not analysed yet 9 Oct 2026
CVE-2026-104391 CVE record

CVSS 6.5 Medium

WordPress Quiz And Survey Master plugin <= 11.2.7 - Cross Site Scripting (XSS) vulnerability
- ExpressTech Quiz And Survey Master
- Cross-site scripting (XSS)
Not analysed yet 7 Oct 2026
CVE-2026-97289 CVE record

CVSS 7.1 High

WordPress Quiz And Survey Master plugin <= 11.2.6 - Cross Site Scripting (XSS) vulnerability
- ExpressTech Quiz And Survey Master
- Cross-site scripting (XSS)
Not analysed yet 30 Sept 2026
CVE-2026-48867 CVE record

CVSS 7.1 High

WordPress Quiz And Survey Master plugin <= 11.1.2 - Cross Site Scripting (XSS) vulnerability
- ExpressTech Quiz And Survey Master
- Cross-site scripting (XSS)
Not analysed yet 15 Jun 2026
CVE-2026-40787 CVE record

CVSS 7.1 High

WordPress Quiz And Survey Master plugin <= 11.0.0 - Cross Site Scripting (XSS) vulnerability
- ExpressTech Quiz And Survey Master
- Cross-site scripting (XSS)
Not analysed yet 15 Jun 2026
CVE-2023-37984 CVE record

CVSS 4.3 Medium

WordPress Quiz And Survey Master plugin <= 8.1.10 - Broken Access Control vulnerability
- ExpressTech Quiz And Survey Master
- Broken access control
Not analysed yet 13 Dec 2024
CVE-2023-51507 CVE record

CVSS 5.3 Medium

WordPress Quiz And Survey Master plugin <= 8.1.16 - Broken Access Control vulnerability
- ExpressTech Quiz And Survey Master
- Broken access control
Not analysed yet 14 Jun 2024
CVE-2023-28787 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

WordPress Quiz And Survey Master plugin <= 8.1.4 - Unauthenticated SQL Injection vulnerability
- ExpressTech Quiz And Survey Master
- SQL injection
Not analysed yet 26 Mar 2024
CVE-2024-27966 CVE record

CVSS 5.9 Medium

WordPress Quiz And Survey Master plugin <= 8.2.2 - Cross Site Scripting (XSS) vulnerability
- ExpressTech Quiz And Survey Master
- Cross-site scripting (XSS)
Not analysed yet 21 Mar 2024
CVE-2023-51521 CVE record

CVSS 5.4 Medium

WordPress Quiz And Survey Master plugin <= 8.1.18 - Cross Site Request Forgery (CSRF) vulnerability
- ExpressTech Quiz And Survey Master
- Cross-site request forgery (CSRF)
Not analysed yet 16 Mar 2024
CVE-2023-47834 CVE record

CVSS 6.5 Medium

WordPress Quiz And Survey Master Plugin <= 8.1.13 is vulnerable to Cross Site Scripting (XSS)
- ExpressTech Quiz And Survey Master
- Cross-site scripting (XSS)
Not analysed yet 22 Nov 2023
CVE-2022-0182 CVE record

ExpressTech Quiz And Survey Master: Stored cross-site scripting vulnerability in Quiz And Survey Master versions prior to…
- ExpressTech Quiz And Survey Master
Not analysed yet 17 Jan 2022
CVE-2022-0181 CVE record

ExpressTech Quiz And Survey Master: Reflected cross-site scripting vulnerability in Quiz And Survey Master versions prior to…
- ExpressTech Quiz And Survey Master
Not analysed yet 17 Jan 2022
CVE-2022-0180 CVE record

ExpressTech Quiz And Survey Master: Cross-site request forgery (CSRF) vulnerability in Quiz And Survey Master versions prior…
- ExpressTech Quiz And Survey Master
Not analysed yet 17 Jan 2022
CVE-2021-20792 CVE record

ExpressTech Quiz And Survey Master: Cross-site scripting vulnerability in Quiz And Survey Master versions prior to 7.1.14…
- ExpressTech Quiz And Survey Master
Not analysed yet 18 Aug 2021