SQL Injection Vulnerability in Quiz And Survey Master by WordPress
CVE-2026-65454

8.5HIGH

Key Information:

Vendor

WordPress
Status
Quiz And Survey Master
Vendor
CVE Published:
23 July 2026

What is CVE-2026-65454?

A SQL Injection vulnerability in the Quiz And Survey Master plugin allows an attacker to manipulate database queries, potentially leading to unauthorized data exposure. This issue affects versions of the plugin up to 11.2.0, highlighting the importance of promptly updating to secure versions to protect WordPress sites from potential exploitation.

Affected Version(s)

Quiz And Survey Master <= 11.2.0

References

https://patchstack.com/database/wordpress/plugin/quiz-mas...
vdb-entry

CVSS V3.1

Score:
8.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

anhcd05 | Patchstack Bug Bounty Program
.