Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

Quiz Maker — Vulnerabilities & Security Advisories 18

All 18 CVE vulnerabilities found in Quiz Maker, with AI-generated Chinese analysis, references, and POCs.

Vendor: Ays Pro

CVE IDTitleCVSSSeverityPublished
CVE-2026-32342 WordPress Quiz Maker plugin <= 6.7.1.2 - Cross Site Request Forgery (CSRF) vulnerability CWE-352 8.8 -2026-03-13
CVE-2026-2384 Quiz Maker <= 6.7.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CWE-79 6.4 Medium2026-02-20
CVE-2025-14579 Quiz Maker < 6.7.0.89 - Admin+ Stored XSS 4.8AIMediumAI2026-01-12
CVE-2025-67595 WordPress Quiz Maker plugin <= 6.7.0.82 - Cross Site Request Forgery (CSRF) vulnerability CWE-352 4.3 Medium2025-12-09
CVE-2025-12426 Quiz Maker <= 6.7.0.80 - Unauthenticated Sensitive Information Exposure CWE-200 5.3 Medium2025-11-19
CVE-2025-58014 WordPress Quiz Maker Plugin <= 6.7.0.64 - Cross Site Request Forgery (CSRF) Vulnerability CWE-352 4.3 Medium2025-09-22
CVE-2025-58015 WordPress Quiz Maker Plugin <= 6.7.0.65 - Sensitive Data Exposure Vulnerability CWE-497 5.3 Medium2025-09-22
CVE-2025-10042 Quiz Maker <= 6.7.0.56 - Unauthenticated SQL Injection CWE-89 5.9 Medium2025-09-17
CVE-2024-8617 Quiz Maker <= 6.5.9.8 - Admin+ Stored XSS 4.8AIMediumAI2025-05-15
CVE-2025-30774 WordPress Quiz Maker plugin <= 6.6.8.7 - SQL Injection vulnerability CWE-89 8.2 High2025-04-01
CVE-2024-6028 Quiz Maker <= 6.5.8.3 - Unauthenticated SQL Injection via 'ays_questions' Parameter CWE-89 9.8 Critical2024-06-25
CVE-2023-23985 WordPress Quiz Maker plugin <= 6.3.9.4 - Content Spoofing CWE-862 3.7 Low2024-04-24
CVE-2024-1078 Quiz Maker <= 6.5.2.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Quiz Creation & Modification CWE-862 4.3 Medium2024-02-07
CVE-2024-1079 Quiz Maker <= 6.5.2.4 - Missing Authorization to Unauthenticated Quiz Data Retrieval CWE-862 5.3 Medium2024-02-07
CVE-2023-6155 Quiz Maker < 6.4.9.5 - Unauthenticated Email Address Disclosure 5.3AIMediumAI2023-12-26
CVE-2023-6166 Quiz Maker < 6.4.9.5 - Reflected Cross-Site Scripting 6.1AIMediumAI2023-12-26
CVE-2023-2571 Quiz Maker < 6.4.2.7 - Reflected XSS 6.1 -2023-06-05
CVE-2021-24456 Quiz Maker < 6.2.0.9 - Multiple Authenticated Blind SQL Injections CWE-89 7.2 -2021-08-02

All 18 known CVE vulnerabilities affecting Quiz Maker with full Chinese analysis, references, and POCs where available.