WordPress Quiz and Survey Master Authenticated SQL Injection (CVE-2026-13767)

Vulnerability Overview Vulnerability Name: Quiz and Survey Master (QSM) <= 11.2.0 - Authenticated (Custom+) SQL Injection via 'pages' Parameter CVE ID: CVE-2026-13767 CVSS Score: 6.5 (Medium) Published Date: July 15, 2026 Last Updated: July 16, 2026 Researcher: PRISM - Wordfence Affected Software Software Type: Plugin Software Slug: quiz-survey-next (view on wordpress.org) Affected Versions: <= 11.2.0 Fixed Version: 11.2.1 Remediation Mitigation: Update to version 11.2.1 or newer. Vulnerability Description The Quiz Master Next plugin for WordPress is vulnerable to Stored SQL Injection in versions up to 11.2.0 due to insufficient escaping on the user-supplied parameter and insufficiently prepared statements in . Specifically, on line 143, the stored page IDs are inserted into the clause without using and integer casting. This allows attackers with author-level access or above to append arbitrary SQL queries to existing queries whenever a user with permission to edit quizzes (including administrators) views the Questions tab, potentially allowing them to extract sensitive information from the database. References plugins.trac.wordpress.org plugins.trac.wordpress.org plugins.trac.wordpress.org Share Options Facebook Twitter LinkedIn Email Additional Information Disclaimer: This record contains copyrighted material. License: Reproduction, preparation of derivative works, public display, public performance, distribution, and dissemination of software vulnerability information is permitted under the license terms of Defiant Inc. MITRE Corporation: Reproduction, preparation of derivative works, public display, public performance, distribution, and dissemination of Common Vulnerabilities and Exposures (CVE) information is permitted under the license terms of MITRE Corporation. Recent Vulnerabilities Quiz and Survey Master (QSM) - Quiz Maker & Survey Maker - CVE-2026-9230: Missing Authorization to Authenticated (Contributor+) Arbitrary Quiz Modification and Email Reroute via LeakedNonce from /quiz/structure - CVE-2026-9233: Missing Authorization to Authenticated (Contributor+) Arbitrary Modification via qsm_insert_qsm_template AJAX Action - CVE-2026-6448: Authenticated (Admin+) SQL Injection via 'order' and 'limit' Parameters - CVE-2026-48867: Easy Quiz and Survey Maker <= 11.1.2 - Unauthenticated Stored Cross-Site Scripting - CVE-2026-40787: Easy Quiz and Survey Maker <= 11.0.0 - Unauthenticated Stored Cross-Site Scripting - CVE-2026-5797: Easy Quiz and Survey Maker <= 11.1.0 - Unauthenticated Shortcode Injection Leading to Arbitrary Quiz Result Disclosure via Quiz Answer Text Input Fields - CVE-2026-2412: Easy Quiz and Survey Maker <= 10.3.5 - Authenticated (Contributor+) SQL Injection via /merged_question/ Parameter - CVE-2026-25329: Easy Quiz and Survey Maker <= 10.3.4 - Missing Authorization - CVE-2026-25324: Easy Quiz and Survey Maker <= 10.3.4 - Unauthenticated Insecure Direct Object Reference - CVE-2025-67987: Easy Quiz and Survey Maker <= 10.3.1 - Authenticated (Subscriber+) SQL Injection Additional Resources Wordfence Intelligence: Provides free personal and commercial API access to a comprehensive WordPress vulnerability database. Wordfence WordPress Plugin: Install the Wordfence plugin to receive immediate notifications about new vulnerabilities. Documentation: View the documentation to learn how to access and use the vulnerability data API. Contact Us Technical Support: 9am-8pm ET, 6am-5pm PT, and 2pm-1am UTC/GMT (excluding weekends and holidays) Response Time: 24-hour support, 365 days a year, 1-hour response time Footer Information Terms of Service: Terms of Service Privacy Policy and Notice at Collection: Privacy Policy and Notice at Collection Do Not Sell or Share My Personal Information: Do Not Sell or Share My Personal Information Social Media Links Twitter: Twitter Facebook: Facebook LinkedIn: LinkedIn Instagram: Instagram Products and Support Wordfence Free: Wordfence Free Wordfence Premium: Wordfence Premium Wordfence Care: Wordfence Care Wordfence Response: Wordfence Response Wordfence CLI: Wordfence CLI Wordfence Intelligence: Wordfence Intelligence Wordfence Central: Wordfence Central Support Documentation: Documentation Learning Center: Learning Center Free Support: Free Support Premium Support: Premium Support News Blog: Blog In The News: In The News Vulnerability Advisories: Vulnerability Advisories About About Wordfence: About Wordfence Affiliate Program: Affiliate Program Employment: Employment Contact: Contact Security: Security CVE-Request Form: CVE-Request Form Subscribe for Updates Sign Up: Sign Up Copyright Information © 2012-2026 Defiant Inc. All Rights Reserved

Goal Reached Thanks to every supporter — we hit 100%!

WordPress Quiz and Survey Master Authenticated SQL Injection (CVE-2026-13767)

More from this source