Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 8 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,334All CVEsplus 19,141 rejected
- 442Last 24 hours2,720 in the last 7 days
- 16,921Last 30 days1,562 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 6 | 13 | 0 | 0 | 19 | 50 |
| 2025 | 0 | 0 | 0 | 0 | 0 | 0 | 31 |
| 2024 | 2 | 0 | 4 | 0 | 0 | 6 | 31 |
| 2023 | 0 | 1 | 4 | 0 | 0 | 5 | 25 |
| 2022 | 0 | 4 | 8 | 3 | 0 | 15 | 20 |
| 2021 | 0 | 3 | 2 | 0 | 0 | 5 | 5 |
| Title | ||
|---|---|---|
| CVE-2026-111408 | WordPress Quiz And Survey Master plugin <= 11.2.7 - PHP Object Injection vulnerabilityExpressTech · Quiz And Survey Master | High8.8 |
| CVE-2026-107862 | WordPress Quiz And Survey Master plugin <= 11.2.7 - Cross Site Scripting (XSS) vulnerabilityExpressTech · Quiz And Survey Master | Medium6.5 |
| CVE-2026-96558 | Quiz and Survey Master (QSM) <= 11.2.6 - Unauthenticated Stored DOM-Based Cross-Site Scripting via 'qsm_hidden_questions' Parameterexpresstech · Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker | High7.2 |
| CVE-2026-104392 | WordPress Quiz And Survey Master plugin <= 11.2.7 - PHP Object Injection vulnerabilityExpressTech · Quiz And Survey Master | High8.8 |
| CVE-2026-104391 | WordPress Quiz And Survey Master plugin <= 11.2.7 - Cross Site Scripting (XSS) vulnerabilityExpressTech · Quiz And Survey Master | Medium6.5 |
| CVE-2026-97289 | WordPress Quiz And Survey Master plugin <= 11.2.6 - Cross Site Scripting (XSS) vulnerabilityExpressTech · Quiz And Survey Master | High7.1 |
| CVE-2026-15963 | Quiz and Survey Master (QSM) <= 11.2.1 - Authenticated (Contributor+) SQL Injection via 'randon_category' Quiz Optionexpresstech · Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker | Medium6.5 |
| CVE-2026-11780 | Quiz and Survey Master (QSM) <= 11.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'question_title' Parameterexpresstech · Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker | Medium6.4 |
| CVE-2026-13767 | Quiz and Survey Master (QSM) <= 11.2.0 - Authenticated (Custom+) SQL Injection via 'pages' Parameterexpresstech · Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker | Medium6.5 |
| CVE-2026-9230 | Quiz and Survey Master (QSM) <= 11.1.4 - Missing Authorization to Authenticated (Contributor+) Arbitrary Quiz Modification and Email Reroute via Leaked Nonce from /quiz/structureexpresstech · Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker | Medium4.3 |
| CVE-2026-9233 | Quiz and Survey Master (QSM) <= 11.1.4 - Missing Authorization to Authenticated (Contributor+) Arbitrary Modification via qsm_insert_quiz_template AJAX Actionexpresstech · Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker | Medium4.3 |
| CVE-2026-48867 | WordPress Quiz And Survey Master plugin <= 11.1.2 - Cross Site Scripting (XSS) vulnerabilityExpressTech · Quiz And Survey Master | High7.1 |
| CVE-2026-40787 | WordPress Quiz And Survey Master plugin <= 11.0.0 - Cross Site Scripting (XSS) vulnerabilityExpressTech · Quiz And Survey Master | High7.1 |
| CVE-2026-6448 | Quiz and Survey Master (QSM) <= 11.1.2 - Authenticated (Admin+) SQL Injection via 'order' and 'limit' Parametersexpresstech · Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker | Medium4.9 |
| CVE-2026-5797 | Quiz and Survey Master (QSM) <= 11.1.0 - Unauthenticated Shortcode Injection Leading to Arbitrary Quiz Result Disclosure via Quiz Answer Text Input Fieldsexpresstech · Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker | Medium5.3 |
| CVE-2026-2412 | Quiz and Survey Master (QSM) <= 10.3.5 - Authenticated (Contributor+) SQL Injection via 'merged_question' Parameterexpresstech · Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker | Medium6.5 |
| CVE-2025-9318 | Quiz and Survey Master (QSM) <= 10.3.1 - Authenticated (Subscriber+) SQL Injection via `is_linking` Query Parameterexpresstech · Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker | Medium6.5 |
| CVE-2025-9637 | Quiz and Survey Master (QSM) <= 10.3.1 - Missing Authorization to Unpublished, Private And Password-Protected Quiz Information Disclosure And Image Response Uploadsexpresstech · Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker | Medium6.5 |
| CVE-2025-9294 | Quiz And Survey Master <= 10.3.1 - Missing Authorization to Authenticated (Subscriber+) Quiz Results Deletionexpresstech · Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker | Medium4.3 |
| CVE-2023-37984 | WordPress Quiz And Survey Master plugin <= 8.1.10 - Broken Access Control vulnerabilityExpressTech · Quiz And Survey Master | Medium4.3 |
| CVE-2023-51507 | WordPress Quiz And Survey Master plugin <= 8.1.16 - Broken Access Control vulnerabilityExpressTech · Quiz And Survey Master | Medium5.3 |
| CVE-2024-3592 | Quiz And Survey Master – Best Quiz, Exam and Survey Plugin for WordPress <= 9.0.1 - Authenticated (Contributor+) SQL Injectionexpresstech · Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker | Critical9.9 |
| CVE-2023-28787 | WordPress Quiz And Survey Master plugin <= 8.1.4 - Unauthenticated SQL Injection vulnerabilityExpressTech · Quiz And Survey Master | Critical9.3 |
| CVE-2024-27966 | WordPress Quiz And Survey Master plugin <= 8.2.2 - Cross Site Scripting (XSS) vulnerabilityExpressTech · Quiz And Survey Master | Medium5.9 |
| CVE-2023-51521 | WordPress Quiz And Survey Master plugin <= 8.1.18 - Cross Site Request Forgery (CSRF) vulnerabilityExpressTech · Quiz And Survey Master | Medium5.4 |
| CVE-2023-47834 | WordPress Quiz And Survey Master Plugin <= 8.1.13 is vulnerable to Cross Site Scripting (XSS)ExpressTech · Quiz And Survey Master | Medium6.5 |
| CVE-2023-26524 | WordPress Quiz And Survey Master Plugin <= 8.0.10 is vulnerable to Cross Site Request Forgery (CSRF)ExpressTech · Quiz And Survey Master – Best Quiz, Exam and Survey Plugin for WordPress | Medium4.3 |
| CVE-2023-0292 | Quiz And Survey Master <= 8.0.8 - Cross-Site Request Forgery to Arbitrary Media Deletionexpresstech · Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker | Medium5.4 |
| CVE-2023-0291 | Quiz And Survey Master <= 8.0.8 - Unauthenticated Arbitrary Media Deletionexpresstech · Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker | High7.2 |
| CVE-2022-46862 | WordPress Quiz And Survey Master Plugin <= 8.0.7 is vulnerable to Cross Site Request Forgery (CSRF)ExpressTech · Quiz And Survey Master – Best Quiz, Exam and Survey Plugin for WordPress | Medium4.3 |
| CVE-2022-4033 | Quiz and Survey Master <= 8.0.4 - Improper Input Validationexpresstech · Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker | Medium5.3 |
| CVE-2022-4032 | Quiz and Survey Master <= 8.0.4 - Unauthenticated iFrame Injection via Paragraph and Short Answerexpresstech · Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker | High7.2 |
| CVE-2022-42883 | WordPress Quiz And Survey Master plugin <= 7.3.10 - Sensitive Information Disclosure vulnerabilityExpressTech · Quiz And Survey Master (WordPress plugin) | Medium5.3 |
| CVE-2022-40698 | WordPress Quiz And Survey Master plugin <= 7.3.10 - Cross-Site Scripting (XSS) vulnerabilityExpressTech · Quiz And Survey Master (WordPress plugin) | Medium5.4 |
| CVE-2022-41652 | WordPress Quiz And Survey Master plugin <= 7.3.10 - Bypass vulnerabilityExpressTech · Quiz And Survey Master (WordPress plugin) | Medium6.5 |
| CVE-2021-36905 | WordPress Quiz And Survey Master plugin <= 7.3.4 - Multiple Auth. Stored Cross-Site Scripting (XSS) vulnerabilitiesExpressTech · Quiz And Survey Master (WordPress plugin) | Medium5.4 |
| CVE-2021-36906 | WordPress Quiz And Survey Master plugin <= 7.3.6 - Multiple Insecure direct object references (IDOR) vulnerabilitiesExpressTech · Quiz And Survey Master (WordPress plugin) | Low2.7 |
| CVE-2021-36898 | WordPress Quiz And Survey Master plugin <= 7.3.4 - Auth. SQL Injection (SQLi) vulnerabilityExpressTech · Quiz And Survey Master (WordPress plugin) | High7.5 |
| CVE-2021-36864 | WordPress Quiz And Survey Master plugin <= 7.3.4 - Auth. Reflected Cross-Site Scripting (XSS) vulnerabilityExpressTech · Quiz And Survey Master (WordPress plugin) | Low3.4 |
| CVE-2021-36863 | WordPress Quiz And Survey Master plugin <= 7.3.4 - Auth. Stored Cross-Site Scripting (XSS) vulnerabilityExpressTech · Quiz And Survey Master (WordPress plugin) | Medium5.4 |
| CVE-2021-36865 | WordPress Quiz And Survey Master plugin <= 7.3.4 - Insecure direct object references (IDOR) vulnerabilityExpressTech · Quiz And Survey Master (WordPress plugin) | Low3.8 |
| CVE-2022-25602 | WordPress Responsive Menu plugin <= 4.1.7 - Nonce token leak leading to arbitrary file upload, theme deletion, plugin settings change vulnerabilityExpressTech · Responsive Menu (WordPress plugin) | High8.3 |
| CVE-2022-0182 | Stored cross-site scripting vulnerability in Quiz And Survey Master versions prior to 7.3.7 allows a remote authenticated attacker to inject an arbitrary…ExpressTech · Quiz And Survey Master | Medium5.4 |
| CVE-2022-0181 | Reflected cross-site scripting vulnerability in Quiz And Survey Master versions prior to 7.3.7 allows a remote attacker to inject an arbitrary script via…ExpressTech · Quiz And Survey Master | Medium6.1 |
| CVE-2022-0180 | Cross-site request forgery (CSRF) vulnerability in Quiz And Survey Master versions prior to 7.3.7 allows a remote attacker to hijack the authentication of…ExpressTech · Quiz And Survey Master | High8.8 |
| CVE-2021-20792 | Cross-site scripting vulnerability in Quiz And Survey Master versions prior to 7.1.14 allows a remote attacker to inject arbitrary script via unspecified…ExpressTech · Quiz And Survey Master | Medium6.1 |
| CVE-2021-24368 | Quiz And Survey Master < 7.1.18 - Reflected Cross-Site Scripting (XSS)ExpressTech · Quiz And Survey Master – Best Quiz, Exam and Survey Plugin for WordPress | Medium6.1 |
| CVE-2021-24162 | Responsive Menu < 4.0.4 - CSRF to Settings UpdateExpressTech · Responsive Menu – Create Mobile-Friendly Menu | High8.8 |
| CVE-2021-24161 | Responsive Menu < 4.0.4 - CSRF to Arbitrary File UploadExpressTech · Responsive Menu – Create Mobile-Friendly Menu | High8.8 |
| CVE-2021-24160 | Responsive Menu 4.0.0 - 4.0.3 - Authenticated Arbitrary File UploadExpressTech · Responsive Menu – Create Mobile-Friendly Menu | High8.8 |