PatchTheCVEquiz and survey master vulnerabilities and fixes
Recent CVEs affecting quiz and survey master, with upgrade or downgrade steps. 13 tracked.
Also searched as: quizandsurveymaster.
quiz and survey master has 13 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 13. Most recent: 2026-01-06. Highest priority: CVE-2024-5606 (score 48/100).
- CVE-2025-9637 MEDIUM 6.5 UPGRADE The Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker plugin for WordPress is vulnerable to unauthoriz
- CVE-2025-9318 MEDIUM 6.5 UPGRADE The Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker plugin for WordPress is vulnerable to time-based
- CVE-2025-9294 MEDIUM 4.3 UPGRADE The Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker plugin for WordPress is vulnerable to unauthoriz
- CVE-2024-8758 MEDIUM 4.8 UPGRADE The Quiz and Survey Master (QSM) WordPress plugin before 9.1.3 does not sanitise and escape some of its setti
- CVE-2024-6879 MEDIUM 4.7 UPGRADE The Quiz and Survey Master (QSM) WordPress plugin before 9.1.1 fails to validate and escape certain Quiz fiel
- CVE-2024-6025 MEDIUM 5.4 UPGRADE The Quiz and Survey Master (QSM) WordPress plugin before 9.0.5 does not sanitise and escape some of its Quiz
- CVE-2024-5606 HIGH 8.8 UPGRADE The Quiz and Survey Master (QSM) WordPress plugin before 9.0.2 is vulnerable does not validate and escape the
- CVE-2024-4934 MEDIUM 5.5 UPGRADE The Quiz and Survey Master (QSM) WordPress plugin before 9.0.2 does not validate and escape some of its Quiz
- CVE-2024-3592 CRITICAL 9.9 UPGRADE The Quiz And Survey Master – Best Quiz, Exam and Survey Plugin for WordPress plugin for WordPress is vulnerabl
- CVE-2024-10679 MEDIUM 6.1 UPGRADE The Quiz and Survey Master (QSM) WordPress plugin before 9.2.1 does not sanitise and escape some of its setti
- CVE-2023-51507 MEDIUM 5.3 UPGRADE Missing Authorization vulnerability in ExpressTech Quiz And Survey Master.This issue affects Quiz And Survey M
- CVE-2023-47834 MEDIUM 6.5 UPGRADE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ExpressT
- CVE-2023-26524 MEDIUM 4.3 UPGRADE Cross-Site Request Forgery (CSRF) vulnerability in ExpressTech Quiz And Survey Master – Best Quiz, Exam and Su
FAQ
How do I fix quiz and survey master vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is quiz and survey master being exploited right now?
None of the tracked quiz and survey master CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which quiz and survey master CVE should I patch first?
CVE-2024-5606 currently ranks highest (48/100): The Quiz and Survey Master (QSM) WordPress plugin before 9.0.2 is vulnerable does not validate and escape the.