Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

Quiz Maker — Vulnerabilities & Security Advisories 18

All 18 CVE vulnerabilities found in Quiz Maker, with AI-generated Chinese analysis, references, and POCs.

This page aggregates security vulnerabilities associated with the Quiz Maker product, categorized by vendor, product, weakness type, and relevant tags. It collects known defects, security advisories, and patch notes, covering the period from initial release through the latest available updates. Readers can track vendor advisories, analyze specific weakness classes, and review the complete vulnerability history for this product to assess its security posture.

Vendor: Ays Pro

CVE ID Title CVSS Severity Published
CVE-2026-32342 WordPress Quiz Maker plugin <= 6.7.1.2 - Cross Site Request Forgery (CSRF) vulnerability CWE-352 4.3 Medium 2026-03-13
CVE-2026-2384 Quiz Maker <= 6.7.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CWE-79 6.4 Medium 2026-02-20
CVE-2025-14579 Quiz Maker < 6.7.0.89 - Admin+ Stored XSS 4.8AI Medium AI 2026-01-12
CVE-2025-67595 WordPress Quiz Maker plugin <= 6.7.0.82 - Cross Site Request Forgery (CSRF) vulnerability CWE-352 4.3 Medium 2025-12-09
CVE-2025-12426 Quiz Maker <= 6.7.0.80 - Unauthenticated Sensitive Information Exposure CWE-200 5.3 Medium 2025-11-19
CVE-2025-58014 WordPress Quiz Maker Plugin <= 6.7.0.64 - Cross Site Request Forgery (CSRF) Vulnerability CWE-352 4.3 Medium 2025-09-22
CVE-2025-58015 WordPress Quiz Maker Plugin <= 6.7.0.65 - Sensitive Data Exposure Vulnerability CWE-497 5.3 Medium 2025-09-22
CVE-2025-10042 Quiz Maker <= 6.7.0.56 - Unauthenticated SQL Injection CWE-89 5.9 Medium 2025-09-17
CVE-2024-8617 Quiz Maker <= 6.5.9.8 - Admin+ Stored XSS 4.8AI Medium AI 2025-05-15
CVE-2025-30774 WordPress Quiz Maker plugin <= 6.6.8.7 - SQL Injection vulnerability CWE-89 8.2 High 2025-04-01
CVE-2024-6028 Quiz Maker <= 6.5.8.3 - Unauthenticated SQL Injection via 'ays_questions' Parameter CWE-89 9.8 Critical 2024-06-25
CVE-2023-23985 WordPress Quiz Maker plugin <= 6.3.9.4 - Content Spoofing CWE-862 3.7 Low 2024-04-24
CVE-2024-1078 Quiz Maker <= 6.5.2.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Quiz Creation & Modification CWE-862 4.3 Medium 2024-02-07
CVE-2024-1079 Quiz Maker <= 6.5.2.4 - Missing Authorization to Unauthenticated Quiz Data Retrieval CWE-862 5.3 Medium 2024-02-07
CVE-2023-6155 Quiz Maker < 6.4.9.5 - Unauthenticated Email Address Disclosure 5.3AI Medium AI 2023-12-26
CVE-2023-6166 Quiz Maker < 6.4.9.5 - Reflected Cross-Site Scripting 6.1AI Medium AI 2023-12-26
CVE-2023-2571 Quiz Maker < 6.4.2.7 - Reflected XSS 6.1 - 2023-06-05
CVE-2021-24456 Quiz Maker < 6.2.0.9 - Multiple Authenticated Blind SQL Injections CWE-89 7.2 - 2021-08-02

All 18 known CVE vulnerabilities affecting Quiz Maker with full Chinese analysis, references, and POCs where available.