PatchTheCVEexpresstech vulnerabilities
Recent CVEs affecting expresstech products. 11 tracked.
expresstech has 11 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 11. Most recent: 2026-01-06. Highest priority: CVE-2024-5606 (score 48/100).
- CVE-2025-9637 MEDIUM 6.5 UPGRADE The Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker plugin for WordPress is vulnerable to unauthoriz
- CVE-2025-9318 MEDIUM 6.5 UPGRADE The Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker plugin for WordPress is vulnerable to time-based
- CVE-2025-9294 MEDIUM 4.3 UPGRADE The Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker plugin for WordPress is vulnerable to unauthoriz
- CVE-2024-8758 MEDIUM 4.8 UPGRADE The Quiz and Survey Master (QSM) WordPress plugin before 9.1.3 does not sanitise and escape some of its setti
- CVE-2024-6879 MEDIUM 4.7 UPGRADE The Quiz and Survey Master (QSM) WordPress plugin before 9.1.1 fails to validate and escape certain Quiz fiel
- CVE-2024-6025 MEDIUM 5.4 UPGRADE The Quiz and Survey Master (QSM) WordPress plugin before 9.0.5 does not sanitise and escape some of its Quiz
- CVE-2024-5606 HIGH 8.8 UPGRADE The Quiz and Survey Master (QSM) WordPress plugin before 9.0.2 is vulnerable does not validate and escape the
- CVE-2024-4934 MEDIUM 5.5 UPGRADE The Quiz and Survey Master (QSM) WordPress plugin before 9.0.2 does not validate and escape some of its Quiz
- CVE-2024-3592 CRITICAL 9.9 UPGRADE The Quiz And Survey Master – Best Quiz, Exam and Survey Plugin for WordPress plugin for WordPress is vulnerabl
- CVE-2024-10679 MEDIUM 6.1 UPGRADE The Quiz and Survey Master (QSM) WordPress plugin before 9.2.1 does not sanitise and escape some of its setti
- CVE-2023-51507 MEDIUM 5.3 UPGRADE Missing Authorization vulnerability in ExpressTech Quiz And Survey Master.This issue affects Quiz And Survey M
FAQ
How do I fix expresstech vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is expresstech being exploited right now?
None of the tracked expresstech CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which expresstech CVE should I patch first?
CVE-2024-5606 currently ranks highest (48/100): The Quiz and Survey Master (QSM) WordPress plugin before 9.0.2 is vulnerable does not validate and escape the.