SQL Injection Threat: 40K+ Sites at Risk from QSM Plugin

Date:

Alert: Quiz and Survey Master Plugin Vulnerability Requires Immediate Attention

A significant security issue has been identified in the Quiz and Survey Master (QSM) plugin, which has over 40,000 active installations. A Subscriber+ SQL injection vulnerability was discovered, allowing logged-in users to execute harmful commands on the database. This issue affects versions 10.3.1 and below.

It’s crucial for users to update to at least version 10.3.2, where this vulnerability has been patched. Failure to do so may expose your site to potential data breaches, putting sensitive information at risk.

For all QSM users, we recommend updating the plugin immediately to protect your website. The risk level associated with this vulnerability is high, making prompt action essential for maintaining your site’s security. Stay safe and ensure your plugins are up to date!

Source: View Original Report

Share post:

spot_imgspot_img

Popular

More like this
Related

Critical PHP Object Injection Vulnerability Found in GiveWP Plugin

A recently discovered vulnerability in the GiveWP plugin poses...

AI Advances Strengthen Cybersecurity: Wordfence Unveils Critical Vulnerability Discovery

Wordfence has revealed significant advancements in its incorporation of...

Critical Unauthenticated Account Takeover Vulnerability Found in TranslatePress Plugin

On August 11, 2026, a significant security vulnerability was...

Hackers Target WordPress Sites in miniOrange Authentication Bypass Attacks

In recent weeks, hackers have escalated their attacks on...