UNKNOWN NVD

CVE-2026-79615

The Quiz and Survey Master (QSM) WordPress plugin before 11.2.4 does not check authorisation when returning question bank entries through one of its REST API r

The Quiz and Survey Master (QSM) WordPress plugin before 11.2.4 does not check authorisation when returning question bank entries through one of its REST API routes, allowing users with a role as low as Contributor to read the questions, hints and correct answer keys of quizzes belonging to other users.

References

https://wpscan.com/vulnerability/f4c77fda-edc2-44c5-95d9-358636896b5f/

Published: 2026-08-28 · Source: NVD · Feed updated: 2026-08-28

This unknown severity vulnerability was published on 2026-08-28 via NVD.

vulnfeed aggregates 11380 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.