Vendor
ExpressTech
66 known vulnerabilities in products by ExpressTech, 0 of them actively exploited (CISA KEV).
Key figures
66
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
6
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2020-35951 | ExpressTech Quiz And Survey Master: security vulnerability | 9.9 | |
| Critical | CVE-2020-35949 | ExpressTech Quiz And Survey Master: Remote Code Execution | 10.0 | |
| High | CVE-2021-24160 | Responsive Menu 4.0.0 - 4.0.3 - Authenticated Arbitrary File Upload | 8.8 | |
| Critical | CVE-2023-28787 | WordPress Quiz And Survey Master plugin <= 8.1.4 - Unauthenticated SQL Injection vulnerability | 9.3 | |
| High | CVE-2021-24221 | Quiz And Survey Master < 7.1.12 - Authenticated SQL injection via shortcode | 8.8 | |
| Critical | CVE-2023-0291 | Quiz And Survey Master <= 8.0.8 - Unauthenticated Arbitrary Media Deletion | 7.2 | |
| Medium | CVE-2021-20792 | ExpressTech Quiz And Survey Master: Cross-Site Scripting (XSS) | 6.1 | |
| High | CVE-2021-24161 | Responsive Menu < 4.0.4 - CSRF to Arbitrary File Upload | 8.8 | |
| High | CVE-2022-25602 | ExpressTech Responsive Menu (WordPress plugin): Exposure of Sensitive Information to an Unauthorized Actor | 8.3 | |
| High | CVE-2026-111408 | WordPress Quiz And Survey Master plugin <= 11.2.7 - PHP Object Injection vulnerability | 8.8 | |
| Medium | CVE-2019-17599 | ExpressTech Quiz And Survey Master: Cross-Site Scripting (XSS) | 6.1 | |
| High | CVE-2026-104392 | WordPress Quiz And Survey Master plugin <= 11.2.7 - PHP Object Injection vulnerability | 8.8 | |
| High | CVE-2021-36898 | ExpressTech Quiz And Survey Master (WordPress plugin): SQL Injection | 7.5 | |
| Medium | CVE-2022-0181 | ExpressTech Quiz And Survey Master: Cross-Site Scripting (XSS) | 6.1 | |
| High | CVE-2021-24162 | Responsive Menu < 4.0.4 - CSRF to Settings Update | 8.8 | |
| Critical | CVE-2024-3592 | ExpressTech Quiz and Survey Master (QSM): SQL Injection | 9.9 | |
| High | CVE-2024-5606 | Quiz And Survey Master < 9.0.2 - Contributor+ SQLi | 8.8 | |
| High | CVE-2026-96558 | ExpressTech Quiz and Survey Master (QSM): Cross-site Scripting | 7.2 | |
| Medium | CVE-2026-15963 | ExpressTech Quiz and Survey Master (QSM): SQL Injection | 6.5 | |
| Medium | CVE-2026-103917 | ExpressTech Quiz and Survey Master (QSM): Code Injection | 6.5 | |
| High | CVE-2022-0180 | ExpressTech Quiz And Survey Master: Cross-Site Request Forgery (CSRF) | 8.8 | |
| Medium | CVE-2026-11780 | ExpressTech Quiz and Survey Master (QSM): Cross-site Scripting | 6.4 | |
| High | CVE-2017-18513 | ExpressTech Responsive Menu: Cross-Site Request Forgery (CSRF) | 8.8 | |
| Medium | CVE-2016-11085 | ExpressTech Quiz And Survey Master: Cross-Site Scripting (XSS) | 6.5 | |
| High | CVE-2022-4032 | Quiz and Survey Master <= 8.0.4 - Unauthenticated iFrame Injection via Paragraph and Short Answer | 7.2 |