The Quiz and Survey Master (QSM) WordPress plugin before 11.1.3 does not implement rate limiting or standard failed-login auditing on its front-end credential-check functionality and returns distinct responses for valid and invalid accounts, allowing unauthenticated attackers to enumerate valid usernames and to brute-force passwords while bypassing brute-force protection Quiz and Survey Master (QSM) WordPress plugin before 11.1.3.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Quiz Master Next Plugin | — | Update quiz-master-next plugin to version 11.1.3, or a newer patched version | Aug 5, 2026 | Jul 6, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub