Known vulnerabilities in Quiz And Survey Master - Best Quiz Plugin for WordPress

Vendor: QSM Team
Software CPE: cpe:2.3:a:quizsurvey:quiz-master-next:*:*:*:*:*:wordpress:*:*
Total vulnerabilities: 21
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Quiz And Survey Master - Best Quiz Plugin for WordPress Quiz And Survey Master - Best Quiz Plugin for WordPress is affected by 21 known vulnerabilities: 4 high, 5 medium, 12 low Critical High Medium Low

Vulnerabilities (21)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU72522 - Cross-Site Request Forgery (CSRF)
CVE-2023-0292
CWE-352 Low
No
No
8.0.9 23.02.2023 SB2023022340
#VU72521 - Missing Authentication for Critical Function
CVE-2023-0291
CWE-306 Medium
No
No
8.0.9 23.02.2023 SB2023022340
#VU68699 - Exposure of sensitive information to an unauthorized actor
CVE-2021-36906
CWE-200 Low
No
No
7.3.7 25.10.2022 SB2022102527
#VU68698 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-36905
CWE-79 Low
No
No
7.3.5 25.10.2022 SB2022102529
#VU68682 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-36863
CWE-79 Low
No
No
7.3.5 25.10.2022 SB2022102529
#VU68678 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2021-36898
CWE-89 Medium
No
No
7.3.5 25.10.2022 SB2022102529
#VU68668 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-36864
CWE-79 Low
No
No
7.3.5 25.10.2022 SB2022102529
#VU68666 - Exposure of sensitive information to an unauthorized actor
CVE-2022-42883
CWE-200 Medium
No
No
7.3.11 25.10.2022 SB2022102530
#VU68665 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-40698
CWE-79 Low
No
No
7.3.11 25.10.2022 SB2022102530
#VU68663 - Improper Authentication
CVE-2022-41652
CWE-287 Medium
No
No
7.3.11 25.10.2022 SB2022102530
#VU59524 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-0182
CWE-79 Low
No
No
7.3.7 12.01.2022 SB2022011206
#VU59523 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-0181
CWE-79 Low
No
No
7.3.7 12.01.2022 SB2022011206
#VU59522 - Cross-Site Request Forgery (CSRF)
CVE-2022-0180
CWE-352 Low
No
No
7.3.7 12.01.2022 SB2022011206
#VU55791 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-20792
CWE-79 Low
No
No
7.1.14 12.08.2021 SB2021081201
#VU46130 - Unrestricted Upload of File with Dangerous Type
CWE-434 High
No
No
7.0.2 31.08.2020 SB2020083104
#VU45698 - Permissions, Privileges, and Access Controls
CWE-264 High
No
No
7.0.1 14.08.2020 SB2020081402
#VU45697 - Unrestricted Upload of File with Dangerous Type
CWE-434 High
No
No
7.0.1 14.08.2020 SB2020081402
#VU32943 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
7.0.0 31.07.2020 SB2020073103
#VU23606 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-17599
CWE-79 Low
No
No
6.3.5 16.12.2019 SB2019121601
#VU19770 - Cross-Site Request Forgery (CSRF)
CWE-352 Medium
No
No
4.7.8 02.08.2019 SB2016121510


Showing elements 1 - 20 out of 21