Threat database

9 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
Medium	5.3	EPSS 0.3%	CVE-2026-62140Quiz And Survey Master · Authorization Bypass Through User-Controlled Key Medium5.3EPSS 0.3%2026-09-11CVE Database V5CVE-2026-62140 Unauthenticated Insecure Direct Object References (IDOR) in Quiz And Survey Master <= 11.2.5 versions. EPSS 0.3%Vulnerability ExpressTech Systems #cwe-639 #ghsa-8w4v-9c8x-pcjp	CVE Database V5	2026-09-11
High	8.5	EPSS 0.4%	CVE-2026-65454Quiz And Survey Master · SQL Injection High8.5EPSS 0.4%2026-07-23CVE Database V5CVE-2026-65454 Contributor SQL Injection in Quiz And Survey Master <= 11.2.0 versions. EPSS 0.4%Vulnerability ExpressTech Systems #cwe-89	CVE Database V5	2026-07-23
High	8.5	EPSS 0.3%	CVE-2025-67987Quiz And Survey Master · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in ExpressTech… High8.5EPSS 0.3%2026-02-20CVE Database V5CVE-2025-67987 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ExpressTech Systems Quiz And Survey Master quiz-master-next allows SQL Injection.This issue affects Quiz And Survey Master: from n/a through <= 10.3.1. EPSS 0.3%Vulnerability ExpressTech Systems	CVE Database V5	2026-02-20
Medium	4.3	EPSS 0.2%	CVE-2026-25329Quiz And Survey Master · Missing Authorization Medium4.3EPSS 0.2%2026-02-19CVE Database V5CVE-2026-25329 Missing Authorization vulnerability in ExpressTech Systems Quiz And Survey Master quiz-master-next allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Quiz And Survey Master: from n/a through <= 10.3.4. EPSS 0.2%Vulnerability ExpressTech Systems	CVE Database V5	2026-02-19
Medium	5.3	EPSS 0.4%	CVE-2026-25324Quiz And Survey Master · Authorization Bypass Through User-Controlled Key Medium5.3EPSS 0.4%2026-02-19CVE Database V5CVE-2026-25324 Authorization Bypass Through User-Controlled Key vulnerability in ExpressTech Systems Quiz And Survey Master quiz-master-next allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Quiz And Survey Master: from n/a through <= 10.3.4. EPSS 0.4%Vulnerability ExpressTech Systems	CVE Database V5	2026-02-19
Medium	4.3	EPSS 0.2%	CVE-2026-24358Quiz And Survey Master · Missing Authorization Medium4.3EPSS 0.2%2026-01-22CVE Database V5CVE-2026-24358 Missing Authorization vulnerability in ExpressTech Systems Quiz And Survey Master quiz-master-next allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Quiz And Survey Master: from n/a through <= 10.3.3. EPSS 0.2%Vulnerability ExpressTech Systems	CVE Database V5	2026-01-22
Medium	5.3	EPSS 0.3%	CVE-2025-63054Quiz And Survey Master · Missing Authorization Medium5.3EPSS 0.3%2025-12-09CVE Database V5CVE-2025-63054 Missing Authorization vulnerability in ExpressTech Systems Quiz And Survey Master quiz-master-next allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Quiz And Survey Master: from n/a through <= 10.3.2. EPSS 0.3%Vulnerability ExpressTech Systems #cwe-862	CVE Database V5	2025-12-09
High	8.5	EPSS 0.3%	CVE-2025-55708Quiz And Survey Master · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in ExpressTech… High8.5EPSS 0.3%2025-08-14CVE Database V5CVE-2025-55708 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ExpressTech Systems Quiz And Survey Master quiz-master-next allows SQL Injection.This issue affects Quiz And Survey Master: from n/a through <= 10.2.4. EPSS 0.3%Vulnerability ExpressTech Systems	CVE Database V5	2025-08-14
High	7.5	EPSS 0.6%	CVE-2024-44011WP Ticket Ultra Help Desk & Support Plugin · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in ExpressTech Systems… High7.5EPSS 0.6%2024-10-05CVE Database V5CVE-2024-44011 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ExpressTech Systems WP Ticket Ultra Help Desk & Support Plugin wp-ticket-ultra allows PHP Local File Inclusion.This issue affects WP Ticket Ultra Help Desk & Support Plugin: from n/a through <= 1.0.5. EPSS 0.6%Vulnerability ExpressTech Systems	CVE Database V5	2024-10-05

Showing 1–9 of 9 results