Quiz Maker by AYS

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   Quiz Maker by AYS

Information

Software Type Plugin
Software Slug quiz-maker (view on wordpress.org)
Software Status Active
Software Author ays-pro
Software Website quiz-plugin.com
Software Downloads 3,689,583
Software Active Installs 20,000
Software Record Last Updated July 21, 2026

20 Vulnerabilities

Submit a Vulnerability
Quiz Maker by AYS <= 6.7.1.29 - Unauthenticated Stored Cross-Site Scripting via 'rate_reason'
5.8
CVE-2026-6817
May 1, 2026
Researcher: CHOIGYEONGMIN
Quiz Maker <= 6.7.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
6.4
CVE-2026-2384
Feb 19, 2026
Researcher: Muhammad Yudha - DJ
Quiz Maker <= 6.7.1.2 - Cross-Site Request Forgery
4.3
CVE-2026-32342
Feb 10, 2026
Researcher: w41bu1
Quiz Maker <= 6.7.0.88 - Authenticated (Admin+) Stored Cross-Site Scripting
4.4
CVE-2025-14579
Dec 22, 2025
Researcher: Bakir Tučić
Quiz Maker <= 6.7.0.82 - Cross-Site Request Forgery
4.3
CVE-2025-67595
Dec 2, 2025
Researcher: Doan Dinh Van
Quiz Maker <= 6.7.0.80 - Unauthenticated Sensitive Information Exposure
5.3
CVE-2025-12426
Nov 18, 2025
Researcher: Rafshanzani Suhada
Quiz Maker <= 6.7.0.65 - Unauthenticated Sensitive Information Exposure
5.3
CVE-2025-58015
Sep 22, 2025
Researcher: Muhammad Zidan Ali Mansur
Quiz Maker <= 6.7.0.64 - Cross-Site Request Forgery
4.3
CVE-2025-58014
Sep 22, 2025
Researcher: Muhammad Zidan Ali Mansur
Quiz Maker <= 6.7.0.56 - Unauthenticated SQL Injection
5.9
CVE-2025-10042
Sep 16, 2025
Researcher: Rahul Sreenivasan (Tr0j4n)
Quiz Maker <= 6.5.9.8 - Authenticated (Admin+) Stored Cross-Site Scripting
4.4
CVE-2024-8617
Sep 16, 2024
Researcher: Krugov Artyom
Quiz Maker <= 6.5.8.3 - Unauthenticated SQL Injection via 'ays_questions' Parameter
9.8
CVE-2024-6028
Jun 24, 2024
Researcher: Arkadiusz Hydzik
Quiz Maker <= 6.5.2.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Quiz Creation & Modification
4.3
CVE-2024-1078
Feb 6, 2024
Researcher: Lucio Sá
Quiz Maker <= 6.5.2.4 - Missing Authorization to Unauthenticated Quiz Data Retrieval
5.3
CVE-2024-1079
Feb 6, 2024
Researcher: Lucio Sá
Quiz Maker <= 6.5.0.5 - Denial of Service
5.3
CVE-2024-22027
Jan 12, 2024
Researcher: Shogo Kumamaru
Quiz Maker <= 6.5.1.1 - Missing Authorization
4.3
CVE-2024-21743
Jan 5, 2024
Researcher: Abdi Pranata
Quiz Maker <= 6.4.9.4 - Missing Authorization to Email Disclosure
5.3
CVE-2023-6155
Nov 30, 2023
Researcher: Krzysztof Zając
Quiz Maker <= 6.4.9.4 - Reflected Cross-Site Scripting
6.1
CVE-2023-6166
Nov 30, 2023
Researcher: Alex Sanford
Quiz Maker <= 6.4.2.6 - Reflected Cross-Site Scripting
6.1
CVE-2023-2571
May 15, 2023
Researcher: Erwan LR
Quiz Maker <= 6.3.9.4 - Content Spoofing
5.3
CVE-2023-23985
Jan 20, 2023
Researcher: yuyudhn
Quiz Maker <= 6.2.0.8 - SQL Injection
7.2
CVE-2021-24456
Jun 29, 2021
Researcher: To Quang Duong
Title Status CVE ID CVSS Researchers Date
Quiz Maker by AYS <= 6.7.1.29 - Unauthenticated Stored Cross-Site Scripting via 'rate_reason' Patched CVE-2026-6817 5.8 CHOIGYEONGMIN May 1, 2026
Quiz Maker <= 6.7.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Patched CVE-2026-2384 6.4 Muhammad Yudha - DJ February 19, 2026
Quiz Maker <= 6.7.1.2 - Cross-Site Request Forgery Patched CVE-2026-32342 4.3 w41bu1 February 10, 2026
Quiz Maker <= 6.7.0.88 - Authenticated (Admin+) Stored Cross-Site Scripting Patched CVE-2025-14579 4.4 Bakir Tučić December 22, 2025
Quiz Maker <= 6.7.0.82 - Cross-Site Request Forgery Patched CVE-2025-67595 4.3 Doan Dinh Van December 2, 2025
Quiz Maker <= 6.7.0.80 - Unauthenticated Sensitive Information Exposure Patched CVE-2025-12426 5.3 Rafshanzani Suhada November 18, 2025
Quiz Maker <= 6.7.0.65 - Unauthenticated Sensitive Information Exposure Patched CVE-2025-58015 5.3 Muhammad Zidan Ali Mansur September 22, 2025
Quiz Maker <= 6.7.0.64 - Cross-Site Request Forgery Patched CVE-2025-58014 4.3 Muhammad Zidan Ali Mansur September 22, 2025
Quiz Maker <= 6.7.0.56 - Unauthenticated SQL Injection Patched CVE-2025-10042 5.9 Rahul Sreenivasan (Tr0j4n) September 16, 2025
Quiz Maker <= 6.5.9.8 - Authenticated (Admin+) Stored Cross-Site Scripting Patched CVE-2024-8617 4.4 Krugov Artyom September 16, 2024
Quiz Maker <= 6.5.8.3 - Unauthenticated SQL Injection via 'ays_questions' Parameter Patched CVE-2024-6028 9.8 Arkadiusz Hydzik June 24, 2024
Quiz Maker <= 6.5.2.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Quiz Creation & Modification Patched CVE-2024-1078 4.3 Lucio Sá February 6, 2024
Quiz Maker <= 6.5.2.4 - Missing Authorization to Unauthenticated Quiz Data Retrieval Patched CVE-2024-1079 5.3 Lucio Sá February 6, 2024
Quiz Maker <= 6.5.0.5 - Denial of Service Patched CVE-2024-22027 5.3 Shogo Kumamaru January 12, 2024
Quiz Maker <= 6.5.1.1 - Missing Authorization Patched CVE-2024-21743 4.3 Abdi Pranata January 5, 2024
Quiz Maker <= 6.4.9.4 - Missing Authorization to Email Disclosure Patched CVE-2023-6155 5.3 Krzysztof Zając November 30, 2023
Quiz Maker <= 6.4.9.4 - Reflected Cross-Site Scripting Patched CVE-2023-6166 6.1 Alex Sanford November 30, 2023
Quiz Maker <= 6.4.2.6 - Reflected Cross-Site Scripting Patched CVE-2023-2571 6.1 Erwan LR May 15, 2023
Quiz Maker <= 6.3.9.4 - Content Spoofing Patched CVE-2023-23985 5.3 yuyudhn January 20, 2023
Quiz Maker <= 6.2.0.8 - SQL Injection Patched CVE-2021-24456 7.2 To Quang Duong June 29, 2021

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation