{"schema_version":1,"title":"ExpressTech Quiz and Survey Master vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 10 vulnerabilities in ExpressTech Quiz and Survey Master: 0 in the last 7 days and 6 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-62140, was published on 11 September 2026.","url":"https://junglewise.ai/threats/technologies/quiz-and-survey-master","json_url":"https://junglewise.ai/threats/technologies/quiz-and-survey-master.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/quiz-and-survey-master","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","counts":{"high":3,"all_time":10,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":1,"last_90_days":6,"last_365_days":10},"latest":[{"cve":"CVE-2026-62140","cvss":5.3,"epss":0.0031,"slug":"cve-2026-62140-expresstech-quiz-and-survey-master-idor-vulnerability","title":"ExpressTech Quiz And Survey Master IDOR vulnerability","severity":"medium","exploited":false,"published_at":"2026-09-11T19:17:45.523+00:00","url":"https://junglewise.ai/threats/cve-2026-62140-expresstech-quiz-and-survey-master-idor-vulnerability"},{"cve":"CVE-2026-14824","cvss":4.8,"epss":0.0024,"slug":"cve-2026-14824-quiz-and-survey-master-stored-xss-in-question-settings","title":"Quiz and Survey Master stored XSS in question settings","severity":"medium","exploited":false,"published_at":"2026-08-04T07:16:28.713+00:00","url":"https://junglewise.ai/threats/cve-2026-14824-quiz-and-survey-master-stored-xss-in-question-settings"},{"cve":"CVE-2026-14820","cvss":5.3,"slug":"cve-2026-14820-quiz-and-survey-master-user-enumeration-and-brute-force-bypass","title":"Quiz and Survey Master user enumeration and brute-force bypass","severity":"info","exploited":false,"published_at":"2026-07-27T07:16:26.083+00:00","url":"https://junglewise.ai/threats/cve-2026-14820-quiz-and-survey-master-user-enumeration-and-brute-force-bypass"},{"cve":"CVE-2026-65454","cvss":8.5,"slug":"cve-2026-65454-expresstech-quiz-and-survey-master-sql-injection","title":"ExpressTech Quiz And Survey Master SQL injection","severity":"high","exploited":false,"published_at":"2026-07-23T12:18:37.827+00:00","url":"https://junglewise.ai/threats/cve-2026-65454-expresstech-quiz-and-survey-master-sql-injection"},{"cve":"CVE-2026-13767","cvss":6.5,"slug":"cve-2026-13767-expresstech-quiz-master-next-sql-injection-in-questions-tab","title":"ExpressTech Quiz Master Next SQL injection in Questions tab","severity":"medium","exploited":false,"published_at":"2026-07-16T09:16:16.943+00:00","url":"https://junglewise.ai/threats/cve-2026-13767-expresstech-quiz-master-next-sql-injection-in-questions-tab"},{"cve":"CVE-2026-9230","cvss":4.3,"slug":"cve-2026-9230-expresstech-quiz-and-survey-master-authorization-bypass","title":"ExpressTech Quiz and Survey Master authorization bypass","severity":"medium","exploited":false,"published_at":"2026-07-03T08:16:25.483+00:00","url":"https://junglewise.ai/threats/cve-2026-9230-expresstech-quiz-and-survey-master-authorization-bypass"},{"cve":"CVE-2026-9233","cvss":4.3,"slug":"cve-2026-9233-quiz-and-survey-master-wordpress-plugin-authorization-bypass","title":"Quiz and Survey Master WordPress plugin authorization bypass","severity":"medium","exploited":false,"published_at":"2026-06-27T08:16:45.77+00:00","url":"https://junglewise.ai/threats/cve-2026-9233-quiz-and-survey-master-wordpress-plugin-authorization-bypass"},{"cve":"CVE-2026-48867","cvss":7.1,"slug":"cve-2026-48867-expresstech-quiz-and-survey-master-unauthenticated-xss","title":"ExpressTech Quiz And Survey Master unauthenticated XSS","severity":"high","exploited":false,"published_at":"2026-06-15T21:17:16.207+00:00","url":"https://junglewise.ai/threats/cve-2026-48867-expresstech-quiz-and-survey-master-unauthenticated-xss"},{"cve":"CVE-2026-40787","cvss":7.1,"slug":"cve-2026-40787-expresstech-quiz-and-survey-master-unauthenticated-xss","title":"ExpressTech Quiz And Survey Master unauthenticated XSS","severity":"high","exploited":false,"published_at":"2026-06-15T21:16:50.943+00:00","url":"https://junglewise.ai/threats/cve-2026-40787-expresstech-quiz-and-survey-master-unauthenticated-xss"},{"cve":"CVE-2026-6448","cvss":4.9,"slug":"cve-2026-6448-wordpress-quiz-and-survey-master-sql-injection-in-order-parameter","title":"WordPress Quiz and Survey Master SQL injection in order parameter","severity":"medium","exploited":false,"published_at":"2026-06-06T00:16:41.477+00:00","url":"https://junglewise.ai/threats/cve-2026-6448-wordpress-quiz-and-survey-master-sql-injection-in-order-parameter"}],"weekly":[{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0}],"related":[],"technology":{"hub":true,"name":"ExpressTech Quiz and Survey Master","slug":"quiz-and-survey-master","vendor":{"name":"ExpressTech","slug":"expresstech","url":"https://junglewise.ai/threats/vendors/expresstech"},"aliases":[],"category":"library","homepage":"https://quizandsurveymaster.com/","repo_url":"https://github.com/expresstech/quiz-and-survey-master","description":"A WordPress plugin used to create and manage quizzes, surveys, and polls.","url":"https://junglewise.ai/threats/technologies/quiz-and-survey-master"},"most_severe":[{"cve":"CVE-2026-65454","cvss":8.5,"slug":"cve-2026-65454-expresstech-quiz-and-survey-master-sql-injection","title":"ExpressTech Quiz And Survey Master SQL injection","severity":"high","exploited":false,"published_at":"2026-07-23T12:18:37.827+00:00","url":"https://junglewise.ai/threats/cve-2026-65454-expresstech-quiz-and-survey-master-sql-injection"},{"cve":"CVE-2026-48867","cvss":7.1,"slug":"cve-2026-48867-expresstech-quiz-and-survey-master-unauthenticated-xss","title":"ExpressTech Quiz And Survey Master unauthenticated XSS","severity":"high","exploited":false,"published_at":"2026-06-15T21:17:16.207+00:00","url":"https://junglewise.ai/threats/cve-2026-48867-expresstech-quiz-and-survey-master-unauthenticated-xss"},{"cve":"CVE-2026-40787","cvss":7.1,"slug":"cve-2026-40787-expresstech-quiz-and-survey-master-unauthenticated-xss","title":"ExpressTech Quiz And Survey Master unauthenticated XSS","severity":"high","exploited":false,"published_at":"2026-06-15T21:16:50.943+00:00","url":"https://junglewise.ai/threats/cve-2026-40787-expresstech-quiz-and-survey-master-unauthenticated-xss"},{"cve":"CVE-2026-13767","cvss":6.5,"slug":"cve-2026-13767-expresstech-quiz-master-next-sql-injection-in-questions-tab","title":"ExpressTech Quiz Master Next SQL injection in Questions tab","severity":"medium","exploited":false,"published_at":"2026-07-16T09:16:16.943+00:00","url":"https://junglewise.ai/threats/cve-2026-13767-expresstech-quiz-master-next-sql-injection-in-questions-tab"},{"cve":"CVE-2026-62140","cvss":5.3,"epss":0.0031,"slug":"cve-2026-62140-expresstech-quiz-and-survey-master-idor-vulnerability","title":"ExpressTech Quiz And Survey Master IDOR vulnerability","severity":"medium","exploited":false,"published_at":"2026-09-11T19:17:45.523+00:00","url":"https://junglewise.ai/threats/cve-2026-62140-expresstech-quiz-and-survey-master-idor-vulnerability"},{"cve":"CVE-2026-6448","cvss":4.9,"slug":"cve-2026-6448-wordpress-quiz-and-survey-master-sql-injection-in-order-parameter","title":"WordPress Quiz and Survey Master SQL injection in order parameter","severity":"medium","exploited":false,"published_at":"2026-06-06T00:16:41.477+00:00","url":"https://junglewise.ai/threats/cve-2026-6448-wordpress-quiz-and-survey-master-sql-injection-in-order-parameter"},{"cve":"CVE-2026-14824","cvss":4.8,"epss":0.0024,"slug":"cve-2026-14824-quiz-and-survey-master-stored-xss-in-question-settings","title":"Quiz and Survey Master stored XSS in question settings","severity":"medium","exploited":false,"published_at":"2026-08-04T07:16:28.713+00:00","url":"https://junglewise.ai/threats/cve-2026-14824-quiz-and-survey-master-stored-xss-in-question-settings"},{"cve":"CVE-2026-9230","cvss":4.3,"slug":"cve-2026-9230-expresstech-quiz-and-survey-master-authorization-bypass","title":"ExpressTech Quiz and Survey Master authorization bypass","severity":"medium","exploited":false,"published_at":"2026-07-03T08:16:25.483+00:00","url":"https://junglewise.ai/threats/cve-2026-9230-expresstech-quiz-and-survey-master-authorization-bypass"},{"cve":"CVE-2026-9233","cvss":4.3,"slug":"cve-2026-9233-quiz-and-survey-master-wordpress-plugin-authorization-bypass","title":"Quiz and Survey Master WordPress plugin authorization bypass","severity":"medium","exploited":false,"published_at":"2026-06-27T08:16:45.77+00:00","url":"https://junglewise.ai/threats/cve-2026-9233-quiz-and-survey-master-wordpress-plugin-authorization-bypass"},{"cve":"CVE-2026-14820","cvss":5.3,"slug":"cve-2026-14820-quiz-and-survey-master-user-enumeration-and-brute-force-bypass","title":"Quiz and Survey Master user enumeration and brute-force bypass","severity":"info","exploited":false,"published_at":"2026-07-27T07:16:26.083+00:00","url":"https://junglewise.ai/threats/cve-2026-14820-quiz-and-survey-master-user-enumeration-and-brute-force-bypass"}],"generated_at":"2026-09-28T03:07:00.154823+00:00"}