What’s Vulnerable › Products
Ays Pro Quiz Maker vulnerabilities
21 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 12 published in the last 12 months.
Check whether your Ays Pro Quiz Maker version is affected
Latest Ays Pro Quiz Maker vulnerabilities
- CVE-2026-110379 — WordPress Quiz Maker plugin <= 6.7.1.91 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- CVE-2026-32342 — WordPress Quiz Maker plugin <= 6.7.1.2 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3)
- CVE-2026-2384 — Quiz Maker <= 6.7.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (CVSS 6.4)
- CVE-2025-14579 — Quiz Maker < 6.7.0.89 - Admin+ Stored XSS (CVSS 4.8)
- CVE-2025-67595 — WordPress Quiz Maker plugin <= 6.7.0.82 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3)
- CVE-2025-12426 — Quiz Maker <= 6.7.0.80 - Unauthenticated Sensitive Information Exposure (CVSS 7.5)
- CVE-2025-58015 — WordPress Quiz Maker Plugin <= 6.7.0.65 - Sensitive Data Exposure Vulnerability (CVSS 7.5)
- CVE-2025-58014 — WordPress Quiz Maker Plugin <= 6.7.0.64 - Cross Site Request Forgery (CSRF) Vulnerability (CVSS 4.3)
- CVE-2025-10042 — Quiz Maker <= 6.7.0.56 - Unauthenticated SQL Injection (CVSS 7.5)
- CVE-2024-8617 — Quiz Maker <= 6.5.9.8 - Admin+ Stored XSS (CVSS 4.8)
- CVE-2025-30774 — WordPress Quiz Maker plugin <= 6.6.8.7 - SQL Injection vulnerability (CVSS 9.8)
- CVE-2024-10628 — Quiz Maker Business, Developer, and Agency <= (Multiple Versions) - Unauthenticated SQL Injection via id (CVSS 7.5)
- CVE-2024-6028 — Quiz Maker <= 6.5.8.3 - Unauthenticated SQL Injection via 'ays_questions' Parameter (CVSS 9.8)
- CVE-2023-23985 — WordPress Quiz Maker plugin <= 6.3.9.4 - Content Spoofing (CVSS 5.3)
- CVE-2024-1079 — Quiz Maker <= 6.5.2.4 - Missing Authorization to Unauthenticated Quiz Data Retrieval (CVSS 5.3)
- CVE-2024-1078 — Quiz Maker <= 6.5.2.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Quiz Creation & Modification (CVSS 4.3)
- CVE-2024-22027 — (CVSS 6.5)
- CVE-2023-6166 — Quiz Maker < 6.4.9.5 - Reflected Cross-Site Scripting (CVSS 6.1)
- CVE-2023-6155 — Quiz Maker < 6.4.9.5 - Unauthenticated Email Address Disclosure (CVSS 5.3)
- CVE-2023-2571 — Quiz Maker < 6.4.2.7 - Reflected XSS (CVSS 6.1)
- CVE-2021-24456 — Quiz Maker < 6.2.0.9 - Multiple Authenticated Blind SQL Injections (CVSS 7.2)