Quiz And Survey Master – Best Quiz, Exam and Survey Plugin for WordPress, CVE-2026-14826
- CVE, Research URL
- Home page URL
-
Security reports for Quiz And Survey Master – Best Quiz, Exam and Survey Plugin for WordPress
- Published on
- Aug 19, 2026
- Research Description
- The Quiz and Survey Master (QSM) WordPress plugin before 11.2.4 does not perform a per-object ownership check on the REST routes that return a quiz's email-notification and results-page configuration, allowing users with contributor-level access and above to read the configuration, including notification recipient addresses, of quizzes created by other users.
- Affected versions
-
max 11.2.4.
- Status
-
vulnerable