Vendor

    ExpressTech

    66 known vulnerabilities in products by ExpressTech, 0 of them actively exploited (CISA KEV).

    Key figures

    66

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    6

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in ExpressTech
    CriticalCVE-2020-35951

    ExpressTech Quiz And Survey Master: security vulnerability

    9.9
    CriticalCVE-2020-35949

    ExpressTech Quiz And Survey Master: Remote Code Execution

    10.0
    HighCVE-2021-24160

    Responsive Menu 4.0.0 - 4.0.3 - Authenticated Arbitrary File Upload

    8.8
    CriticalCVE-2023-28787

    WordPress Quiz And Survey Master plugin <= 8.1.4 - Unauthenticated SQL Injection vulnerability

    9.3
    HighCVE-2021-24221

    Quiz And Survey Master < 7.1.12 - Authenticated SQL injection via shortcode

    8.8
    CriticalCVE-2023-0291

    Quiz And Survey Master <= 8.0.8 - Unauthenticated Arbitrary Media Deletion

    7.2
    MediumCVE-2021-20792

    ExpressTech Quiz And Survey Master: Cross-Site Scripting (XSS)

    6.1
    HighCVE-2021-24161

    Responsive Menu < 4.0.4 - CSRF to Arbitrary File Upload

    8.8
    HighCVE-2022-25602

    ExpressTech Responsive Menu (WordPress plugin): Exposure of Sensitive Information to an Unauthorized Actor

    8.3
    HighCVE-2026-111408

    WordPress Quiz And Survey Master plugin <= 11.2.7 - PHP Object Injection vulnerability

    8.8
    MediumCVE-2019-17599

    ExpressTech Quiz And Survey Master: Cross-Site Scripting (XSS)

    6.1
    HighCVE-2026-104392

    WordPress Quiz And Survey Master plugin <= 11.2.7 - PHP Object Injection vulnerability

    8.8
    HighCVE-2021-36898

    ExpressTech Quiz And Survey Master (WordPress plugin): SQL Injection

    7.5
    MediumCVE-2022-0181

    ExpressTech Quiz And Survey Master: Cross-Site Scripting (XSS)

    6.1
    HighCVE-2021-24162

    Responsive Menu < 4.0.4 - CSRF to Settings Update

    8.8
    CriticalCVE-2024-3592

    ExpressTech Quiz and Survey Master (QSM): SQL Injection

    9.9
    HighCVE-2024-5606

    Quiz And Survey Master < 9.0.2 - Contributor+ SQLi

    8.8
    HighCVE-2026-96558

    ExpressTech Quiz and Survey Master (QSM): Cross-site Scripting

    7.2
    MediumCVE-2026-15963

    ExpressTech Quiz and Survey Master (QSM): SQL Injection

    6.5
    MediumCVE-2026-103917

    ExpressTech Quiz and Survey Master (QSM): Code Injection

    6.5
    HighCVE-2022-0180

    ExpressTech Quiz And Survey Master: Cross-Site Request Forgery (CSRF)

    8.8
    MediumCVE-2026-11780

    ExpressTech Quiz and Survey Master (QSM): Cross-site Scripting

    6.4
    HighCVE-2017-18513

    ExpressTech Responsive Menu: Cross-Site Request Forgery (CSRF)

    8.8
    MediumCVE-2016-11085

    ExpressTech Quiz And Survey Master: Cross-Site Scripting (XSS)

    6.5
    HighCVE-2022-4032

    Quiz and Survey Master <= 8.0.4 - Unauthenticated iFrame Injection via Paragraph and Short Answer

    7.2

    All vulnerabilities in search

    Products