SQL Injection

Every one of the 14 is a mark on the map. Named now: 1 to 14, most at risk first.

1. Quiz and Survey Master <= 8.1.4 - SQL InjectionCVE-2023-28787ExpressTech · CVSS 9.3 · 2.0% likely

   CWE-89

2. Quiz And Survey Master < 7.1.12 - Authenticated SQL injection via shortcodeCVE-2021-24221Expresstech · 1.9% likely

   CWE-89

3. WordPress Quiz And Survey Master plugin <= 7.3.4 - Auth. SQL Injection (SQLi) vulnerabilityCVE-2021-36898ExpressTech · CVSS 7.5 · 1.1% likely

   CWE-89

4. Quiz And Survey Master < 9.0.2 - Contributor+ SQLiCVE-2024-5606Expresstech · CVSS 8.8 · 0.6% likely

   CWE-89

5. Quiz And Survey Master – Best Quiz, Exam and Survey Plugin for WordPress <= 9.0.1 - Authenticated (Contributor+) SQL InjectionCVE-2024-3592expresstech · CVSS 9.9 · 0.5% likely

   CWE-89

6. Quiz and Survey Master (QSM) <= 11.2.1 - Authenticated (Contributor+) SQL Injection via 'randon_category' Quiz OptionCVE-2026-15963expresstech · CVSS 6.5 · 0.5% likely

   CWE-89

7. Quiz and Survey Master (QSM) <= 11.2.9 - Authenticated (Contributor+) SQL Injection via 'qpages' ParameterCVE-2026-116509expresstech · CVSS 6.5 · 0.4% likely

   CWE-89

8. Quiz and Survey Master (QSM) <= 11.2.0 - Authenticated (Custom+) SQL Injection via 'pages' ParameterCVE-2026-13767expresstech · CVSS 6.5 · 0.4% likely

   CWE-89

9. WordPress Quiz And Survey Master plugin <= 11.2.0 - SQL Injection vulnerabilityCVE-2026-65454ExpressTech Systems · CVSS 8.5 · 0.4% likely

   CWE-89

10. Quiz and Survey Master (QSM) <= 11.1.2 - Authenticated (Admin+) SQL Injection via 'order' and 'limit' ParametersCVE-2026-6448expresstech · CVSS 4.9 · 0.4% likely

    CWE-89

11. Quiz and Survey Master (QSM) <= 10.3.5 - Authenticated (Contributor+) SQL Injection via 'merged_question' ParameterCVE-2026-2412expresstech · CVSS 6.5 · 0.3% likely

    CWE-89

12. WordPress Quiz And Survey Master plugin <= 10.3.1 - SQL Injection vulnerabilityCVE-2025-67987ExpressTech Systems · CVSS 8.5 · 0.3% likely

    CWE-89

13. WordPress Quiz And Survey Master Plugin <= 10.2.4 - SQL Injection VulnerabilityCVE-2025-55708ExpressTech Systems · CVSS 8.5 · 0.3% likely

    CWE-89

14. Quiz and Survey Master (QSM) <= 10.3.1 - Authenticated (Subscriber+) SQL Injection via `is_linking` Query ParameterCVE-2025-9318expresstech · CVSS 6.5 · 0.3% likely

    CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.