Is Quiz Maker by AYS safe?

Every recorded flaw

• Oct 19, 2026Quiz Maker: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')CVE-2026-110379 · affects up to 6.7.1.91 · reported by PatchstackHigh 7.1
• May 2, 2026Quiz Maker by AYS: Stored Cross-Site ScriptingCVE-2026-6817 · affects up to 6.7.1.29 · reported by WordfenceMedium 5.8
• Mar 13, 2026Quiz Maker: Cross-Site Request Forgery (CSRF)CVE-2026-32342 · affects up to 6.7.1.2 · reported by PatchstackMedium 4.3
• Feb 19, 2026Quiz Maker: Stored Cross-Site ScriptingCVE-2026-2384 · affects up to 6.7.1.7 · reported by WordfenceMedium 6.4
• Jan 12, 2026Quiz Maker: Does not sanitise and escape some of its settingsCVE-2025-14579 · fixed in 6.7.0.89 · reported by WPScanMedium 4.8
• Dec 9, 2025Quiz Maker: Cross-Site Request Forgery (CSRF)CVE-2025-67595 · affects up to 6.7.0.82 · reported by PatchstackMedium 4.3
• Nov 19, 2025Quiz Maker: Sensitive Information ExposureCVE-2025-12426 · affects up to 6.7.0.80 · reported by WordfenceMedium 5.3
• Sep 22, 2025Quiz Maker: Exposure of Sensitive System Information to an Unauthorized Control SphereCVE-2025-58015 · affects up to 6.7.0.65 · reported by PatchstackMedium 5.3
• Sep 22, 2025Quiz Maker: Cross-Site Request Forgery (CSRF)CVE-2025-58014 · affects up to 6.7.0.64 · reported by PatchstackMedium 4.3
• Sep 17, 2025Quiz Maker: SQL InjectionCVE-2025-10042 · affects up to 6.7.0.56 · reported by WordfenceMedium 5.9
• May 15, 2025Quiz Maker: Does not sanitize and escape some of its settingsCVE-2024-8617 · fixed in 6.5.9.9 · reported by WPScanMedium 4.8
• Apr 1, 2025Quiz Maker: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')CVE-2025-30774 · affects up to 6.6.8.7 · reported by PatchstackHigh 8.2
• Jun 25, 2024Quiz Maker: Time-based SQL InjectionCVE-2024-6028 · affects up to 6.5.8.3 · reported by Wordfence12% oddsCritical 9.8
• Apr 24, 2024Quiz Maker: Missing AuthorizationCVE-2023-23985 · affects up to 6.3.9.4 · reported by PatchstackLow 3.7
• Feb 7, 2024Quiz Maker: Unauthorized access of dataCVE-2024-1079 · affects up to 6.5.2.4 · reported by WordfenceMedium 5.3
• Feb 7, 2024Quiz Maker: Unauthorized modification of dataCVE-2024-1078 · affects up to 6.5.2.4 · reported by WordfenceMedium 4.3
• Jan 12, 2024WordPress Quiz Maker Plugin prior to 6.5.0.6: Improper input validationCVE-2024-22027 · fixed in 6.5.0.6 · reported by vultures@jpcert.or.jpMedium 6.5
• Dec 26, 2023Quiz Maker: Does not escape generated URLs before outputting them in attributesCVE-2023-6166 · fixed in 6.4.9.5 · reported by WPScanMedium 6.1
• Dec 26, 2023Quiz Maker: Does not adequately authorize the `ays_quiz_author_user_search` AJAX actionCVE-2023-6155 · fixed in 6.4.9.5 · reported by WPScanMedium 5.3
• Jun 5, 2023Quiz Maker: Does not escape some parameters before outputting them back in attributesCVE-2023-2571 · fixed in 6.4.2.7 · reported by WPScan2.1% oddsMedium 6.1
• Aug 2, 2021Quiz Maker: Did not properly sanitise and escape the order and orderby parameters before using them in SQL statementsCVE-2021-24456 · fixed in 6.2.0.9 · reported by WPScan1.3% oddsHigh 7.2

Records come from the National Vulnerability Database, published by the researchers who found each flaw (Wordfence, Patchstack, WPScan and others); exploited status from CISA; exploit odds from FIRST’s EPSS; current version, installs and closures from wordpress.org, checked daily. Want every plugin on your site checked at once? Run the free website check.