Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Quiz and Survey Master (QSM) 11.2.4 Clear all filters
TI-2026-12496 CVE-2026-14826 · GHSA-28r4-82c9-hfh7

Quiz And Survey Master < 11.2.4 - Contributor+ Cross-Quiz Email and Results Configuration Disclosure via IDOR

Priority LOW 13

The Quiz and Survey Master (QSM) WordPress plugin before 11.2.4 does not perform a per-object ownership check on the REST routes that return a quiz's email-notification and results-page configuration, allowing users with…

CVSS 3.1LOW 2.7 Network High privileges No interaction EPSS 0.00299 Published 2026-08-19 Fixed in 11.2.4 CWE-639
TI-2026-12495 CVE-2026-14825 · GHSA-cpph-75q5-7vr9

Quiz And Survey Master < 11.2.4 - Contributor+ Arbitrary Quiz Text Settings Update via IDOR

Priority LOW 13

The Quiz and Survey Master (QSM) WordPress plugin before 11.2.4 does not perform a per-object ownership check before saving a quiz's front-end text settings, allowing users with contributor-level access and above to modi…

CVSS 3.1LOW 2.7 Network High privileges No interaction EPSS 0.00281 Published 2026-08-19 Fixed in 11.2.4 CWE-639