Approved changes feed: RSS · Atom

cpe:2.3:a:expresstech:quiz_and_survey_master_–_best_quiz,_exam_and_survey_plugin_for_wordpress:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorExpresstech (8cd29c90-9f0f-5fe0-b0c4-1df4572a401e)
ProductQuiz And Survey Master – Best Quiz, Exam And Survey Plugin For Wordpress (fbbad2f1-52c6-5b08-b702-f8f40902873e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-26524 vulnerable 2026-06-08 05:57:39.880746 WordPress Quiz And Survey Master Plugin <= 8.0.10 is vulnerable to Cross Site Request Forgery (CSRF)
MEDIUM (4.3)
Cross-Site Request Forgery (CSRF) vulnerability in ExpressTech Quiz And Survey Master – Best Quiz, Exam and Survey Plugin for WordPress plugin <= 8.0.10 versions.
Published: 2023-11-12T23:55:18.599Z
Updated: 2026-04-28T16:08:12.376Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-4033 vulnerable 2026-06-08 05:51:36.590204 Quiz and Survey Master <= 8.0.4 - Improper Input Validation
MEDIUM (5.3)
The Quiz and Survey Master plugin for WordPress is vulnerable to input validation bypass via the 'question[id]' parameter in versions up to, and including, 8.0.4 due to insufficient input validation that allows attackers to inject content other than the specified value (i.e. a number, file path, etc..). This makes it possible attackers to submit values other than the intended input type.
Published: 2022-11-29T20:25:26.881Z
Updated: 2026-04-08T17:11:57.352Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-46862 vulnerable 2026-06-08 05:50:39.661608 WordPress Quiz And Survey Master Plugin <= 8.0.7 is vulnerable to Cross Site Request Forgery (CSRF)
MEDIUM (4.3)
Cross-Site Request Forgery (CSRF) vulnerability in ExpressTech Quiz And Survey Master – Best Quiz, Exam and Survey Plugin for WordPress plugin <= 8.0.7 versions.
Published: 2023-02-14T11:26:14.262Z
Updated: 2026-04-28T16:07:55.806Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-24368 vulnerable 2026-06-08 05:30:04.257379 Quiz And Survey Master < 7.1.18 - Reflected Cross-Site Scripting (XSS)
The Quiz And Survey Master – Best Quiz, Exam and Survey Plugin WordPress plugin before 7.1.18 did not sanitise or escape its result_id parameter when displaying an existing quiz result page, leading to a reflected Cross-Site Scripting issue. This could allow for privilege escalation by inducing a logged in admin to open a malicious link
Published: 2021-06-20T12:31:32.000Z
Updated: 2024-08-03T19:28:23.844Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.