Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

ExpressTech vulnerabilities

50 published CVEs name ExpressTech among the affected products.

All 50 in the listAtom feed of new CVEs
Published CVEs
50
Last 12 months
19
Critical
2
Known exploited
0

Critical 2High 14Medium 31Low 3Not scored 0

CVEs per yearBy the year they were published

  1. 20215
  2. 202215
  3. 20235
  4. 20246
  5. 202619

Newest CVEs

  • CVE-2026-111408

    WordPress Quiz And Survey Master plugin <= 11.2.7 - PHP Object Injection vulnerability

    ExpressTech · Quiz And Survey Master

    High8.8
  • CVE-2026-107862

    WordPress Quiz And Survey Master plugin <= 11.2.7 - Cross Site Scripting (XSS) vulnerability

    ExpressTech · Quiz And Survey Master

    Medium6.5
  • CVE-2026-96558

    Quiz and Survey Master (QSM) <= 11.2.6 - Unauthenticated Stored DOM-Based Cross-Site Scripting via 'qsm_hidden_questions' Parameter

    expresstech · Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker

    High7.2
  • CVE-2026-104392

    WordPress Quiz And Survey Master plugin <= 11.2.7 - PHP Object Injection vulnerability

    ExpressTech · Quiz And Survey Master

    High8.8
  • CVE-2026-104391

    WordPress Quiz And Survey Master plugin <= 11.2.7 - Cross Site Scripting (XSS) vulnerability

    ExpressTech · Quiz And Survey Master

    Medium6.5
  • CVE-2026-97289

    WordPress Quiz And Survey Master plugin <= 11.2.6 - Cross Site Scripting (XSS) vulnerability

    ExpressTech · Quiz And Survey Master

    High7.1
  • CVE-2026-15963

    Quiz and Survey Master (QSM) <= 11.2.1 - Authenticated (Contributor+) SQL Injection via 'randon_category' Quiz Option

    expresstech · Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker

    Medium6.5
  • CVE-2026-11780

    Quiz and Survey Master (QSM) <= 11.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'question_title' Parameter

    expresstech · Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker

    Medium6.4
  • CVE-2026-13767

    Quiz and Survey Master (QSM) <= 11.2.0 - Authenticated (Custom+) SQL Injection via 'pages' Parameter

    expresstech · Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker

    Medium6.5
  • CVE-2026-9230

    Quiz and Survey Master (QSM) <= 11.1.4 - Missing Authorization to Authenticated (Contributor+) Arbitrary Quiz Modification and Email Reroute via Leaked Nonce from /quiz/structure

    expresstech · Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker

    Medium4.3

Products with the most CVEs

  1. Quiz And Survey Master17
  2. Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker13
  3. Quiz And Survey Master (WordPress plugin)9
  4. Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker4
  5. Quiz And Survey Master – Best Quiz, Exam and Survey Plugin for WordPress3
  6. Responsive Menu Pro3
  7. Responsive Menu – Create Mobile-Friendly Menu3
  8. Responsive Menu (WordPress plugin)1

Most common weaknesses

  1. CWE-79 Cross-site scripting (XSS)18
  2. CWE-89 SQL injection8
  3. CWE-352 Cross-site request forgery (CSRF)7
  4. CWE-862 Missing authorization7
  5. CWE-20 Improper input validation2
  6. CWE-200 Exposure of sensitive information2
  7. CWE-434 Unrestricted file upload2
  8. CWE-502 Deserialization of untrusted data2
  9. CWE-639 Authorization bypass through a user-controlled key (IDOR)2
  10. CWE-284 Improper access control1