Lucene search
+L

14 matches found

NVD
NVD
•added 2026/07/28 7:16 a.m.•19 views

CVE-2026-14821

The Quiz and Survey Master QSM WordPress plugin before 11.1.5 does not perform a capability check before deleting output templates, allowing users with contributor-level access and above to delete arbitrary templates...

2.7CVSS0.00281EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/07/28 6:00 a.m.•13 views

EUVD-2026-49700

The Quiz and Survey Master QSM WordPress plugin before 11.1.5 does not perform a capability check before deleting output templates, allowing users with contributor-level access and above to delete arbitrary templates...

2.7CVSS5.9AI score0.00281EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/28 12:00 a.m.•1 views

CVE-2026-14821: Missing Authorization

The Quiz and Survey Master QSM WordPress plugin before 11.1.5 does not perform a capability check before deleting output templates, allowing users with contributor-level access and above to delete arbitrary templates...

2.7CVSS5.9AI score0.00281EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/07/28 12:00 a.m.•20 views

PT-2026-65392

The Quiz and Survey Master QSM WordPress plugin before 11.1.5 does not perform a capability check before deleting output templates, allowing users with contributor-level access and above to delete arbitrary templates...

5.9AI score0.00281EPSS
SaveExploits0References2
NVD
NVD
•added 2026/06/27 8:16 a.m.•33 views

CVE-2026-9233

The Quiz and Survey Master QSM – Easy Quiz and Survey Maker plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 11.1.4. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for...

4.3CVSS0.00473EPSS
SaveExploits0References12
CVE
CVE
•added 2026/06/27 6:50 a.m.•50 views

CVE-2026-9233

CVE-2026-9233 affects the WordPress plugin Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker up to version 11.1.4 . The root cause is an authorization bypass in the AJAX action qsm_insert_quiz_template , allowing authenticated users with contributor-level access and above to create, modif...

4.3CVSS5.9AI score0.00473EPSS
SaveExploits0References12
Vulnrichment
Vulnrichment
•added 2026/06/27 6:50 a.m.•14 views

CVE-2026-9233 Quiz and Survey Master (QSM) <= 11.1.4 - Missing Authorization to Authenticated (Contributor+) Arbitrary Modification via qsm_insert_quiz_template AJAX Action

The Quiz and Survey Master QSM – Easy Quiz and Survey Maker plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 11.1.4. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for...

4.3CVSS5.9AI score0.00473EPSS
SaveExploits0References12
attackerkb
attackerkb
•added 2026/06/27 6:50 a.m.•15 views

CVE-2026-9233

The Quiz and Survey Master QSM – Easy Quiz and Survey Maker plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 11.1.4. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for...

4.3CVSS5.9AI score0.00473EPSS
SaveExploits0References13
Positive Technologies
Positive Technologies
•added 2026/06/27 12:00 a.m.•38 views

PT-2026-53058

Name of the Vulnerable Software and Affected Versions Quiz and Survey Master QSM – Easy Quiz and Survey Maker versions prior to 11.1.5 Description An authorization bypass exists because the plugin fails to properly verify if a user is authorized to perform specific actions. Authenticated attacker...

4.3CVSS5.9AI score0.00473EPSS
SaveExploits0References18
GithubExploit
GithubExploit
•added 2026/06/12 11:53 p.m.•129 views

kiro-cybersecurity-skills

CyberSecurity Skills A collection of 15 security workflows co...

5.5AI score
SaveExploits0
Debian CVE
Debian CVE
•added 2024/07/02 1:47 p.m.•97 views

CVE-2024-38519

yt-dlp and youtube-dl are command-line audio/video downloaders. Prior to the fixed versions, yt-dlp and youtube-dl do not limit the extensions of downloaded files, which could lead to arbitrary filenames being created in the download folder and path traversal on Windows. Since yt-dlp and youtube-...

7.8CVSS5.8AI score0.00325EPSS
SaveExploits0
Veracode
Veracode
•added 2024/04/12 10:28 a.m.•36 views

OS Command Injection

yt-dlp is vulnerable to OS Command Injection. This vulnerability is due to insufficient escaping of special characters, specifically in the expansion of output templates within the --exec option...

8.3CVSS7.1AI score0.01254EPSS
SaveExploits1References7Affected Software1
OpenVAS
OpenVAS
•added 2013/08/20 12:00 a.m.•18 views

Fedora Update for xmobar FEDORA-2013-13332

Check for the Version of xmobar OpenVAS Vulnerability Test Fedora Update for xmobar FEDORA-2013-13332 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

7.5CVSS0.5AI score0.08985EPSS
SaveExploits2References2
Fedora
Fedora
•added 2013/08/06 12:26 a.m.•32 views

[SECURITY] Fedora 19 Update: xmobar-0.18-1.fc19

Inspired by the Ion3 status bar, it supports similar features, like dynamic color management, output templates, and extensibility through plugins...

7.5CVSS1.4AI score0.08985EPSS
SaveExploits2
Rows per page
Query Builder