Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 11.1.4. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with contributor-level access and above, to create, modify, and delete quiz output templates stored in the mlw_quiz_output_templates database table, including storing unsanitized HTML content such as arbitrary script tags.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-9233 Authorization Bypass in Quiz and Survey Master WordPress Plugin Up to 11.1.4 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-9233
Post summary
A newly identified CVE-2026-9233 reveals an authorization bypass in the Quiz and Survey Master WordPress Plugin (versions up to 11.1.4), as reported on Vulmon.
🚨*CVE* CVE-2026-9233 The Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 11.1.4. T… https://www.cve.org/CVERecord?id=CVE-2026-9233 ----- Traducción: CVE-2026-9233 The… http://infoflow.cloud`
Post summary
The post discloses CVE-2026-9233, identifying an authorization bypass in the WordPress Quiz and Survey Master plugin, with no indication of exploits, active attacks, or patches.
CVE-2026-9233 The Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 11.1.4. T… https://www.cve.org/CVERecord?id=CVE-2026-9233
Post summary
CVE‑2026‑9233 is an authorization bypass vulnerability affecting all Quiz and Survey Master WordPress plugin versions up to 11.1.4, with no PoC, exploit code, or patch details provided in the text.