Vulnerabilidades en expresstech
51 resultadosCVE-2021-36865LOWWordPress Quiz And Survey Master plugin <= 7.3.4 - Insecure direct object references (IDOR) vulnerabilityEPSS 0.5%CVE-2021-36864LOWWordPress Quiz And Survey Master plugin <= 7.3.4 - Auth. Reflected Cross-Site Scripting (XSS) vulnerabilityEPSS 0.5%CVE-2026-9230MEDIUMQuiz and Survey Master (QSM) <= 11.1.4 - Missing Authorization to Authenticated (Contributor+) Arbitrary Quiz Modification and Email Reroute via Leaked Nonce from /quiz/structureEPSS 0.5%CVE-2021-36905MEDIUMWordPress Quiz And Survey Master plugin <= 7.3.4 - Multiple Auth. Stored Cross-Site Scripting (XSS) vulnerabilitiesEPSS 0.5%CVE-2024-3592CRITICALQuiz And Survey Master – Best Quiz, Exam and Survey Plugin for WordPress <= 9.0.1 - Authenticated (Contributor+) SQL InjectionEPSS 0.5%CVE-2026-9233MEDIUMQuiz and Survey Master (QSM) <= 11.1.4 - Missing Authorization to Authenticated (Contributor+) Arbitrary Modification via qsm_insert_quiz_template AJAX ActionEPSS 0.5%CVE-2023-37984MEDIUMWordPress Quiz And Survey Master plugin <= 8.1.10 - Broken Access Control vulnerabilityEPSS 0.5%CVE-2022-40698MEDIUMWordPress Quiz And Survey Master plugin <= 7.3.10 - Cross-Site Scripting (XSS) vulnerabilityEPSS 0.5%CVE-2026-15963MEDIUMQuiz and Survey Master (QSM) <= 11.2.1 - Authenticated (Contributor+) SQL Injection via 'randon_category' Quiz OptionEPSS 0.5%CVE-2026-11780MEDIUMQuiz and Survey Master (QSM) <= 11.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'question_title' ParameterEPSS 0.4%CVE-2026-13767MEDIUMQuiz and Survey Master (QSM) <= 11.2.0 - Authenticated (Custom+) SQL Injection via 'pages' ParameterEPSS 0.4%CVE-2023-47834MEDIUMWordPress Quiz And Survey Master Plugin <= 8.1.13 is vulnerable to Cross Site Scripting (XSS)EPSS 0.4%CVE-2022-46862MEDIUMWordPress Quiz And Survey Master Plugin <= 8.0.7 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.4%CVE-2026-111408HIGHWordPress Quiz And Survey Master plugin <= 11.2.7 - PHP Object Injection vulnerabilityEPSS 0.4%CVE-2026-6448MEDIUMQuiz and Survey Master (QSM) <= 11.1.2 - Authenticated (Admin+) SQL Injection via 'order' and 'limit' ParametersEPSS 0.4%CVE-2026-2412MEDIUMQuiz and Survey Master (QSM) <= 10.3.5 - Authenticated (Contributor+) SQL Injection via 'merged_question' ParameterEPSS 0.3%CVE-2024-27966MEDIUMWordPress Quiz And Survey Master plugin <= 8.2.2 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2023-51507MEDIUMWordPress Quiz And Survey Master plugin <= 8.1.16 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2023-26524MEDIUMWordPress Quiz And Survey Master Plugin <= 8.0.10 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.3%CVE-2026-103917MEDIUMQuiz and Survey Master (QSM) <= 11.2.7 - Unauthenticated Arbitrary Shortcode Execution via 'qsm_unique_key' ParameterEPSS 0.3%