{"schema_version":1,"title":"ExpressTech vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 8 vulnerabilities in ExpressTech: 0 in the last 7 days and 4 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-62140, was published on 11 September 2026. 1 technology has a page of its own.","url":"https://junglewise.ai/threats/vendors/expresstech","json_url":"https://junglewise.ai/threats/vendors/expresstech.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/vendors/expresstech","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"vendor","counts":{"high":2,"all_time":8,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":1,"last_90_days":4,"last_365_days":8},"latest":[{"cve":"CVE-2026-62140","cvss":5.3,"epss":0.0031,"slug":"cve-2026-62140-expresstech-quiz-and-survey-master-idor-vulnerability","title":"ExpressTech Quiz And Survey Master IDOR vulnerability","severity":"medium","exploited":false,"published_at":"2026-09-11T19:17:45.523+00:00","url":"https://junglewise.ai/threats/cve-2026-62140-expresstech-quiz-and-survey-master-idor-vulnerability"},{"cve":"CVE-2026-14820","cvss":5.3,"slug":"cve-2026-14820-quiz-and-survey-master-user-enumeration-and-brute-force-bypass","title":"Quiz and Survey Master user enumeration and brute-force bypass","severity":"info","exploited":false,"published_at":"2026-07-27T07:16:26.083+00:00","url":"https://junglewise.ai/threats/cve-2026-14820-quiz-and-survey-master-user-enumeration-and-brute-force-bypass"},{"cve":"CVE-2026-13767","cvss":6.5,"slug":"cve-2026-13767-expresstech-quiz-master-next-sql-injection-in-questions-tab","title":"ExpressTech Quiz Master Next SQL injection in Questions tab","severity":"medium","exploited":false,"published_at":"2026-07-16T09:16:16.943+00:00","url":"https://junglewise.ai/threats/cve-2026-13767-expresstech-quiz-master-next-sql-injection-in-questions-tab"},{"cve":"CVE-2026-9230","cvss":4.3,"slug":"cve-2026-9230-expresstech-quiz-and-survey-master-authorization-bypass","title":"ExpressTech Quiz and Survey Master authorization bypass","severity":"medium","exploited":false,"published_at":"2026-07-03T08:16:25.483+00:00","url":"https://junglewise.ai/threats/cve-2026-9230-expresstech-quiz-and-survey-master-authorization-bypass"},{"cve":"CVE-2026-9233","cvss":4.3,"slug":"cve-2026-9233-quiz-and-survey-master-wordpress-plugin-authorization-bypass","title":"Quiz and Survey Master WordPress plugin authorization bypass","severity":"medium","exploited":false,"published_at":"2026-06-27T08:16:45.77+00:00","url":"https://junglewise.ai/threats/cve-2026-9233-quiz-and-survey-master-wordpress-plugin-authorization-bypass"},{"cve":"CVE-2026-48867","cvss":7.1,"slug":"cve-2026-48867-expresstech-quiz-and-survey-master-unauthenticated-xss","title":"ExpressTech Quiz And Survey Master unauthenticated XSS","severity":"high","exploited":false,"published_at":"2026-06-15T21:17:16.207+00:00","url":"https://junglewise.ai/threats/cve-2026-48867-expresstech-quiz-and-survey-master-unauthenticated-xss"},{"cve":"CVE-2026-40787","cvss":7.1,"slug":"cve-2026-40787-expresstech-quiz-and-survey-master-unauthenticated-xss","title":"ExpressTech Quiz And Survey Master unauthenticated XSS","severity":"high","exploited":false,"published_at":"2026-06-15T21:16:50.943+00:00","url":"https://junglewise.ai/threats/cve-2026-40787-expresstech-quiz-and-survey-master-unauthenticated-xss"},{"cve":"CVE-2026-6448","cvss":4.9,"slug":"cve-2026-6448-wordpress-quiz-and-survey-master-sql-injection-in-order-parameter","title":"WordPress Quiz and Survey Master SQL injection in order parameter","severity":"medium","exploited":false,"published_at":"2026-06-06T00:16:41.477+00:00","url":"https://junglewise.ai/threats/cve-2026-6448-wordpress-quiz-and-survey-master-sql-injection-in-order-parameter"}],"vendor":{"hub":true,"name":"ExpressTech","slug":"expresstech","homepage":"https://expresstech.io/","description":"A software development company that produces WordPress plugins including Quiz and Survey Master.","url":"https://junglewise.ai/threats/vendors/expresstech"},"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0}],"most_severe":[{"cve":"CVE-2026-48867","cvss":7.1,"slug":"cve-2026-48867-expresstech-quiz-and-survey-master-unauthenticated-xss","title":"ExpressTech Quiz And Survey Master unauthenticated XSS","severity":"high","exploited":false,"published_at":"2026-06-15T21:17:16.207+00:00","url":"https://junglewise.ai/threats/cve-2026-48867-expresstech-quiz-and-survey-master-unauthenticated-xss"},{"cve":"CVE-2026-40787","cvss":7.1,"slug":"cve-2026-40787-expresstech-quiz-and-survey-master-unauthenticated-xss","title":"ExpressTech Quiz And Survey Master unauthenticated XSS","severity":"high","exploited":false,"published_at":"2026-06-15T21:16:50.943+00:00","url":"https://junglewise.ai/threats/cve-2026-40787-expresstech-quiz-and-survey-master-unauthenticated-xss"},{"cve":"CVE-2026-13767","cvss":6.5,"slug":"cve-2026-13767-expresstech-quiz-master-next-sql-injection-in-questions-tab","title":"ExpressTech Quiz Master Next SQL injection in Questions tab","severity":"medium","exploited":false,"published_at":"2026-07-16T09:16:16.943+00:00","url":"https://junglewise.ai/threats/cve-2026-13767-expresstech-quiz-master-next-sql-injection-in-questions-tab"},{"cve":"CVE-2026-62140","cvss":5.3,"epss":0.0031,"slug":"cve-2026-62140-expresstech-quiz-and-survey-master-idor-vulnerability","title":"ExpressTech Quiz And Survey Master IDOR vulnerability","severity":"medium","exploited":false,"published_at":"2026-09-11T19:17:45.523+00:00","url":"https://junglewise.ai/threats/cve-2026-62140-expresstech-quiz-and-survey-master-idor-vulnerability"},{"cve":"CVE-2026-6448","cvss":4.9,"slug":"cve-2026-6448-wordpress-quiz-and-survey-master-sql-injection-in-order-parameter","title":"WordPress Quiz and Survey Master SQL injection in order parameter","severity":"medium","exploited":false,"published_at":"2026-06-06T00:16:41.477+00:00","url":"https://junglewise.ai/threats/cve-2026-6448-wordpress-quiz-and-survey-master-sql-injection-in-order-parameter"},{"cve":"CVE-2026-9230","cvss":4.3,"slug":"cve-2026-9230-expresstech-quiz-and-survey-master-authorization-bypass","title":"ExpressTech Quiz and Survey Master authorization bypass","severity":"medium","exploited":false,"published_at":"2026-07-03T08:16:25.483+00:00","url":"https://junglewise.ai/threats/cve-2026-9230-expresstech-quiz-and-survey-master-authorization-bypass"},{"cve":"CVE-2026-9233","cvss":4.3,"slug":"cve-2026-9233-quiz-and-survey-master-wordpress-plugin-authorization-bypass","title":"Quiz and Survey Master WordPress plugin authorization bypass","severity":"medium","exploited":false,"published_at":"2026-06-27T08:16:45.77+00:00","url":"https://junglewise.ai/threats/cve-2026-9233-quiz-and-survey-master-wordpress-plugin-authorization-bypass"},{"cve":"CVE-2026-14820","cvss":5.3,"slug":"cve-2026-14820-quiz-and-survey-master-user-enumeration-and-brute-force-bypass","title":"Quiz and Survey Master user enumeration and brute-force bypass","severity":"info","exploited":false,"published_at":"2026-07-27T07:16:26.083+00:00","url":"https://junglewise.ai/threats/cve-2026-14820-quiz-and-survey-master-user-enumeration-and-brute-force-bypass"}],"generated_at":"2026-09-26T09:11:00.170868+00:00","technologies":[{"name":"ExpressTech Quiz and Survey Master","slug":"quiz-and-survey-master","vulnerabilities":10,"url":"https://junglewise.ai/threats/technologies/quiz-and-survey-master"}]}