Plugin Pulse Beta
← Pulse

Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker

by ExpressTech Systems · Uncategorized

Also makes 6 other plugins · 110K+ installs across the portfolio →

Try it live ↗ wp.org ↗

Quiz maker & survey maker for WordPress. Build quizzes, surveys, exams & assessments with scoring, results pages & lead capture — free & easy.

Try it live opens a temporary test site in your browser, which can take about 20 seconds to load. Plugins that rely on outside services or a full server may not work completely there.

Health

A 86/100

no flags

Active installs

40K+

≈49K estimated

Momentum

+2%

downloads vs prior 30d

Biggest opportunity: Support resolution scores 50/100. Mark more forum threads resolved — the resolved ratio feeds the ranking.

See the detail → Get the free audit
How scoring works →
86 Health · A
Maintenance 100/100
Rating quality 94/100
Support 62/100
Security 75/100

86 health vs 58 average across 25,737 Uncategorized plugins

40K+

Active installs

≈49K estimated

3.5M

Total downloads

since 2013 · 1.2% still active

4.7/5

Rating

1,282 reviews · +0.2/wk

+2%

46.7K

Downloads · 30d

category median +7%

Install conversion

How it's measured →

1.2%

of downloads still active

At least 40K of 3.5M lifetime downloads are still running, above its category: the median Uncategorized plugin keeps 0.6%, across 17,770 plugins.

Downloads count every update, not just first installs, so older and more frequently released plugins read lower. Compare against other Uncategorized plugins, not across the directory. wp.org reports active installs as the bottom of a band, so the real rate is this or higher.

This plugin shipped 23 releases in the last 12 months, and every existing install that updated counted as another download. wp.org publishes no split between first installs and updates, so we show the raw rate rather than guess at one.

Ratings · 1282 reviews

Read on wp.org ↗
5★
1135 4★
67 3★
18 2★
18 1★
44

Details

Version
11.2.9
Last updated
8d ago
Added
2013-09-10 · 13 yrs old
Requires WP
5.0
Tested up to
7.1.4
Requires PHP
5.4
Changelog ↗Support forum ↗Reviews ↗Advanced stats ↗

Directory ranking optimization

How it's scored →

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

91 / 100

Excellent listing optimization

Most to gain: Support resolution

Update recency 100/100

Updated 8 days ago

WP compatibility 100/100

Tested up to WordPress 7.1.4, the current branch or newer

Rating quality 94/100

4.7★ over 1,282 reviews, smoothed to 4.68★

Listing tuning 100/100

5 of 5 tags set · short description in place

Support resolution 50/100

3 of 6 support threads resolved in the last 2 months

To rank higher: Mark more forum threads resolved — the resolved ratio feeds the ranking.

Get the full rank-higher report →

Daily downloads

Since 5 Oct 2022 · 1,488 days · wp.org + Plugin Pulse archive

+2% vs prior 30d
67931 Oct 2026

30-day downloads

Rolling 30-day volume · peak 72.9K · peaks are release surges

46.8K31 Oct 2026

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

Quiz and Survey Mast · #898youQuiz Maker by AYS · #1245HD Quiz · #2710Quiz Maker, Poll Mak · #2885

Rating trend

Star average over time · dips mark rough releases

4.731 Oct 2026

Health trend

Composite health score, snapshotted daily

8631 Oct 2026

Update activity

How busy the existing users are, measured as downloads in the last 30 days for every 1,000 active sites. A spike means a new release everyone's pulling; a long, slow decline means an aging user base that updates less.

1.2K31 Oct 2026

Release cadence

Actively maintained
from wp.org release tags

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

23

releases in the last 12 months

8d ago

latest release · v11.2.9 · 23 Oct 2026

312

tagged releases on record

Recent releases

11.2.9 · 23 Oct 202611.2.8 · 5 Oct 202611.2.7 · 24 Sep 202611.2.6 · 4 Sep 202611.2.5 · 24 Aug 202611.2.4 · 10 Aug 202611.2.3 · 29 Jul 202611.2.2 · 27 Jul 202611.2.1 · 15 Jul 202611.2.0 · 29 Jun 202611.1.5 · 12 Jun 202611.1.4 · 29 May 202611.1.3 · 25 May 202611.1.2 · 12 May 2026

What its installed base runs

via wordpress.org

Share of active installs on each version of this plugin · 40% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

v11.2 40%
v11.1 15%
v10.3 8.2%
v10.2 7.8%
Older / other versions 30%

Estimated active installs

The public count shows “40K+”. Our estimate pins where the real number sits.

tracked estimate
40K–50K ≈49K

Crossed into this band 5.9 years ago; a band this size takes about a year or more to cross, which places it about 90% of the way through.

Install history since 3 Oct 2021

40K31 Oct 2026

Recent reviews

All reviews on wp.org ↗
  1. ★★★★★ Dino Pierini
    7mo ago

    Excelente herramienta para QUIZ

    Read on wp.org ↗
  2. ★★★★★ OFILS.com
    8mo ago

    Keep up this great production mindset! It’s a quality I find rare. Currently, this open-source plugin is in my top 3 for WordPress.

    Read on wp.org ↗
  3. ★★★★★ dock3r
    8mo ago

    This is the best Quiz plugin in WP repository. Its free plan is far better than most of other Quiz plugins paid version. The programming support is stellar. It has loads of hooks you can use from outside.

    Read on wp.org ↗
  4. ★★★★★ erdeme61
    11mo ago

    Translations does not get picked up when you translate using loco and their provided .pot files. Poorly coded.

    Read on wp.org ↗
  5. ★★★★★ btavagyok
    1.1y ago

    The plugin is really reliable, does what it says on the label.However, we ran into some complications with the settings and started getting weird results from our tests.Asked for assistance from the support team and I can’t thank them enough for being so professional, fast and effective! They spotted our issues immediately and suggested ways to solve to problem. And my, are they patient 🙂Great product, wonderful team!Thanks for being there for us!

    Read on wp.org ↗
  6. ★★★★★ lesponnes
    1.1y ago

    Many thanks to QSM support team. They really took care of my request instantly. They proposed and implemented a very good solution to my quizz. Amazing support experience !

    Read on wp.org ↗
  7. ★★★★★ etd87
    1.1y ago

    I have used the paid plugin for 3 years now and I´m really happy with both plugin and support team!thanks!

    Read on wp.org ↗
  8. ★★★★★ Tricia Belmonte
    1.1y ago

    I am absolutely blown away by the support I received from the QSM team, especially Dhanush. I chose this plugin after a careful review of many options, and it led the way with its quiz options and professional appearance (and built-in email automation!). What I didn’t expect was to receive a level of care and expertise you’d expect from a premium service—and all on their free plugin! I ran into a complex issue where emails were not being sent after the quiz was completed. While I spent hours trying to troubleshoot it myself, the team took over that stress and took the time to identify and fix a deep database error on my site. They were polite, patient, and kept me informed through every step of the process. The plugin itself is fantastic, very easy to set up, and I can’t wait to add the upgraded options to make my fantastic quiz even more powerful. It’s their support, however, that truly makes this plugin stand out. I can’t wait to launch this amazing-looking quiz to the world and build my client’s leads list with it. This is definitely a five-star plugin. If you’re looking for a quiz plugin, look no further!

    Read on wp.org ↗

Latest updates

via wp.org changelog

Recent releases and news for this plugin

  1. — Version 11.2.2 Security: Fixed a Contributor+ stored XSS in the Polar question type where the “required” setting was emitted into an unquoted HTML attribute (CVE-2026-14824). Credit: Meher Sudhakar Abbireddi. Security: Fixed a Contribu 11.2.2
  2. — Version 11.2.1 Feature: Added an option to display the latest result in the Limited Entry Attempts feature. Bug: Fixed a JavaScript bug affecting the answer limit for Multiple Choice question types. Patch: Improved API request validati 11.2.1
  3. — Version 11.2.0 Feature: Added the ability to configure page limits for individual pages when using manual pagination Bug: Resolved an issue where the progress bar was not displaying correctly for flashcard questions Patch: Fixed a stor 11.2.0
  4. — Version 11.1.5 Feature: Added the %QSM_ADMIN_EMAIL% template variable to include the admin email in email templates Feature: Added %QSM_START_QUIZ_DATE% and %QSM_END_QUIZ_DATE% template variables to display the quiz start and end dates 11.1.5
  5. — Version 11.1.4 Bug: Fixed issues with bulk question imports and file reset functionality Patch: Resolved an IDOR vulnerability in REST endpoints that could allow unauthorized quiz and question modifications Enhancement: Improved QSM Co 11.1.4
  6. — Version 11.1.3 Bug: Resolved result display issues with random questions and answers Patch: Fixed a Cross-Site Scripting (XSS) vulnerability in rich answer type questions Enhancement: Improved the question hints UI in the new quiz rend 11.1.3

Security history

via Wordfence Intelligence

All 83 disclosed vulnerabilities are patched in the current version (11.2.9). Sites still on an older version should update.

  1. Patched High · 7.5 Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker <= 11.2.7 - Authenticated (Contributor+) PHP Object Injection ↗
    2026-10-17 CVE-2026-111408 Deserialization of Untrusted Data Affects <= 11.2.7 Patched in 11.2.8
  2. Patched Medium · 6.4 Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker <= 11.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2026-10-12 CVE-2026-107862 Improper Neutralization of Input During Web Page Generation Affects <= 11.2.7 Patched in 11.2.8
  3. Patched High · 7.2 Quiz and Survey Master (QSM) <= 11.2.6 - Unauthenticated Stored DOM-Based Cross-Site Scripting via 'qsm_hidden_questions' Parameter ↗
    2026-10-09 CVE-2026-96558 Improper Neutralization of Input During Web Page Generation Affects <= 11.2.6 Patched in 11.2.7
  4. Patched Medium · 6.4 Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker <= 11.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2026-10-07 CVE-2026-104391 Improper Neutralization of Input During Web Page Generation Affects <= 11.2.7 Patched in 11.2.8
  5. Patched High · 7.5 Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker <= 11.2.7 - Authenticated (Contributor+) PHP Object Injection ↗
    2026-10-07 CVE-2026-104392 Deserialization of Untrusted Data Affects <= 11.2.7 Patched in 11.2.8
  6. Patched High · 7.2 Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker <= 11.2.6 - Unauthenticated Stored Cross-Site Scripting ↗
    2026-09-30 CVE-2026-97289 Improper Neutralization of Input During Web Page Generation Affects <= 11.2.6 Patched in 11.2.7
  7. Patched Medium · 5.3 Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker <= 11.2.5 - Unauthenticated Insecure Direct Object Reference ↗
    2026-09-10 CVE-2026-62140 Authorization Bypass Through User-Controlled Key Affects <= 11.2.5 Patched in 11.2.6
  8. Patched Medium · 4.3 Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker < 11.2.4 - Authenticated (Contributor+) Insecure Direct Object Reference ↗
    2026-08-28 CVE-2026-79615 Authorization Bypass Through User-Controlled Key Affects < 11.2.4 Patched in 11.2.4
  9. Patched Medium · 4.3 Quiz And Survey Master <= 11.2.3 - Authenticated (Contributor+) Insecure Direct Object Reference ↗
    2026-08-17 CVE-2026-14826 Authorization Bypass Through User-Controlled Key Affects <= 11.2.3 Patched in 11.2.4
  10. Patched Medium · 4.3 Quiz And Survey Master <= 11.2.3 - Authenticated (Contributor+) Insecure Direct Object Reference ↗
    2026-08-17 CVE-2026-14825 Authorization Bypass Through User-Controlled Key Affects <= 11.2.3 Patched in 11.2.4
  11. Patched Medium · 6.5 Quiz and Survey Master (QSM) <= 11.2.1 - Authenticated (Contributor+) SQL Injection via 'randon_category' Quiz Option ↗
    2026-08-15 CVE-2026-15963 Improper Neutralization of Special Elements used in an SQL Command Affects <= 11.2.1 Patched in 11.2.2
  12. Patched Medium · 6.4 Quiz and Survey Master (QSM) <= 11.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'question_title' Parameter ↗
    2026-08-15 CVE-2026-11780 Improper Neutralization of Input During Web Page Generation Affects <= 11.2.1 Patched in 11.2.2
  13. Patched Medium · 6.4 Quiz And Survey Master <= 11.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2026-07-27 CVE-2026-14824 Improper Neutralization of Input During Web Page Generation Affects <= 11.2.1 Patched in 11.2.2
  14. Patched Medium · 6.5 Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker <= 11.2.0 - Authenticated (Contributor+) SQL Injection ↗
    2026-07-22 CVE-2026-65454 Improper Neutralization of Special Elements used in an SQL Command Affects <= 11.2.0 Patched in 11.2.1
  15. Patched Medium · 6.5 Quiz and Survey Master (QSM) <= 11.2.0 - Authenticated (Custom+) SQL Injection via 'pages' Parameter ↗
    2026-07-15 CVE-2026-13767 Improper Neutralization of Special Elements used in an SQL Command Affects <= 11.2.0 Patched in 11.2.1
  16. Patched Medium · 4.3 Quiz And Survey Master <= 11.1.4 - Missing Authorization ↗
    2026-07-07 CVE-2026-14821 Missing Authorization Affects <= 11.1.4 Patched in 11.1.5
  17. Patched Medium · 5.3 Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker < 11.1.3 - Unauthenticated User Enumeration ↗
    2026-07-06 CVE-2026-14820 Exposure of Sensitive Information to an Unauthorized Actor Affects < 11.1.3 Patched in 11.1.3
  18. Patched Medium · 4.3 Quiz and Survey Master (QSM) <= 11.1.4 - Missing Authorization to Authenticated (Contributor+) Arbitrary Quiz Modification and Email Reroute via Leaked Nonce from /quiz/structure ↗
    2026-07-02 CVE-2026-9230 Missing Authorization Affects <= 11.1.4 Patched in 11.1.5
  19. Patched Medium · 4.3 Quiz and Survey Master (QSM) <= 11.1.4 - Missing Authorization to Authenticated (Contributor+) Arbitrary Modification via qsm_insert_quiz_template AJAX Action ↗
    2026-06-26 CVE-2026-9233 Missing Authorization Affects <= 11.1.4 Patched in 11.1.5
  20. Patched Medium · 4.9 Quiz and Survey Master (QSM) <= 11.1.2 - Authenticated (Admin+) SQL Injection via 'order' and 'limit' Parameters ↗
    2026-06-05 CVE-2026-6448 Improper Neutralization of Special Elements used in an SQL Command Affects <= 11.1.2 Patched in 11.1.3
  21. Patched High · 7.2 Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker <= 11.1.2 - Unauthenticated Stored Cross-Site Scripting ↗
    2026-06-03 CVE-2026-48867 Improper Neutralization of Input During Web Page Generation Affects <= 11.1.2 Patched in 11.1.3
  22. Patched High · 7.2 Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker <= 11.0.0 - Unauthenticated Stored Cross-Site Scripting ↗
    2026-04-23 CVE-2026-40787 Improper Neutralization of Input During Web Page Generation Affects <= 11.0.0 Patched in 11.1.0
  23. Patched Medium · 5.3 Quiz and Survey Master (QSM) <= 11.1.0 - Unauthenticated Shortcode Injection Leading to Arbitrary Quiz Result Disclosure via Quiz Answer Text Input Fields ↗
    2026-04-16 CVE-2026-5797 Improper Neutralization of Special Elements in Output Used by a Downstream Component Affects <= 10.1.0 Patched in 11.1.1
  24. Patched Medium · 6.5 Quiz and Survey Master (QSM) <= 10.3.5 - Authenticated (Contributor+) SQL Injection via 'merged_question' Parameter ↗
    2026-03-23 CVE-2026-2412 Improper Neutralization of Special Elements used in an SQL Command Affects <= 10.3.5 Patched in 11.0.0
  25. Patched Medium · 4.3 Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker <= 10.3.4 - Missing Authorization ↗
    2026-02-05 CVE-2026-25329 Missing Authorization Affects <= 10.3.4 Patched in 10.3.5
  26. Patched Medium · 5.3 Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker <= 10.3.4 - Unauthenticated Insecure Direct Object Reference ↗
    2026-02-01 CVE-2026-25324 Authorization Bypass Through User-Controlled Key Affects <= 10.3.4 Patched in 10.3.5
  27. Patched Medium · 6.5 Quiz And Survey Master <= 10.3.1 - Authenticated (Subscriber+) SQL Injection ↗
    2026-01-28 CVE-2025-67987 Improper Neutralization of Special Elements used in an SQL Command Affects <= 10.3.1 Patched in 10.3.2
  28. Patched Medium · 4.3 Quiz And Survey Master <= 10.3.3 - Missing Authorization ↗
    2026-01-08 CVE-2026-24358 Missing Authorization Affects <= 10.3.3 Patched in 10.3.4
  29. Patched Medium · 6.5 Quiz and Survey Master (QSM) <= 10.3.1 - Missing Authorization to Unpublished, Private And Password-Protected Quiz Information Disclosure And Image Response Uploads ↗
    2026-01-05 CVE-2025-9637 Missing Authorization Affects <= 10.3.1 Patched in 10.3.2
  30. Patched Medium · 6.5 Quiz and Survey Master (QSM) <= 10.3.1 - Authenticated (Subscriber+) SQL Injection via `is_linking` Query Parameter ↗
    2026-01-05 CVE-2025-9318 Improper Neutralization of Special Elements used in an SQL Command Affects <= 10.3.1 Patched in 10.3.2
  31. Patched Medium · 4.3 Quiz And Survey Master <= 10.3.1 - Missing Authorization to Authenticated (Subscriber+) Quiz Results Deletion ↗
    2026-01-05 CVE-2025-9294 Improper Authorization Affects <= 10.3.1 Patched in 10.3.2
  32. Patched Medium · 5.3 Quiz And Survey Master <= 10.3.2 - Missing Authorization ↗
    2025-11-30 CVE-2025-63054 Missing Authorization Affects <= 10.3.2 Patched in 10.3.3
  33. Patched High · 8.1 Quiz And Survey Master <= 10.2.5 - Unauthenticated PHP Object Injection ↗
    2025-09-03 CVE-2025-49401 Deserialization of Untrusted Data Affects <= 10.2.5 Patched in 10.2.6
  34. Patched Medium · 6.5 Quiz And Survey Master <= 10.2.4 - Authenticated (Contributor+) SQL Injection ↗
    2025-08-14 CVE-2025-55708 Improper Neutralization of Special Elements used in an SQL Command Affects <= 10.2.4 Patched in 10.2.5
  35. Patched Medium · 4.3 Quiz and Survey Master (QSM) <= 10.2.2 - Cross-Site Request Forgery to Template Creation ↗
    2025-07-24 CVE-2025-6790 Cross-Site Request Forgery Affects <= 10.2.2 Patched in 10.2.3
  36. Patched Medium · 4.4 Quiz and Survey Master (QSM) <= 9.2.0 - Authenticated (Admin+) Stored Cross-Site Scripting ↗
    2025-03-11 CVE-2024-10679 Improper Neutralization of Input During Web Page Generation Affects <= 9.2.0 Patched in 9.2.1
  37. Patched Medium · 4.4 Quiz and Survey Master (QSM) <= 9.1.2 - Authenticated (Admin+) Stored Cross-Site Scripting ↗
    2024-09-02 CVE-2024-8758 Improper Neutralization of Input During Web Page Generation Affects <= 9.1.2 Patched in 9.1.3
  38. Patched Medium · 6.4 Quiz and Survey Master (QSM) <= 9.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2024-08-05 CVE-2024-6879 Improper Neutralization of Input During Web Page Generation Affects <= 9.1.0 Patched in 9.1.1
  39. Patched Medium · 6.4 Quiz and Survey Master <= 9.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2024-07-13 CVE-2024-6390 Improper Neutralization of Input During Web Page Generation Affects <= 9.0.5 Patched in 9.1.0
  40. Patched Medium · 6.4 Quiz and Survey Master <= 9.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2024-06-20 CVE-2024-6025 Improper Neutralization of Input During Web Page Generation Affects <= 9.0.4 Patched in 9.0.5
  41. Patched Medium · 6.4 Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker <= 9.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2024-06-10 CVE-2024-4934 Improper Neutralization of Input During Web Page Generation Affects <= 9.0.1 Patched in 9.0.2
  42. Patched Critical · 9.9 Quiz And Survey Master – Best Quiz, Exam and Survey Plugin for WordPress <= 9.0.1 - Authenticated (Contributor+) SQL Injection ↗
    2024-06-06 CVE-2024-3592 Improper Neutralization of Special Elements used in an SQL Command Affects <= 9.0.1 Patched in 9.0.2
  43. Patched Medium · 4.4 Quiz And Survey Master <= 8.2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting ↗
    2024-03-13 CVE-2024-27966 Improper Neutralization of Input During Web Page Generation Affects <= 8.2.2 Patched in 8.2.3
  44. Patched Medium · 4.3 Quiz And Survey Master <= 8.1.18 - Cross-Site Request Forgery ↗
    2023-12-27 CVE-2023-51521 Cross-Site Request Forgery Affects <= 8.1.18 Patched in 8.1.19
  45. Patched Medium · 5.3 Quiz And Survey Master <= 8.1.16 - Missing Authorization ↗
    2023-12-27 CVE-2023-51507 Missing Authorization Affects <= 8.1.16 Patched in 8.1.17
  46. Patched Medium · 6.4 Quiz And Survey Master <= 8.1.13 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2023-11-16 CVE-2023-47834 Improper Neutralization of Input During Web Page Generation Affects <= 8.1.13 Patched in 8.1.14
  47. Patched Medium · 4.3 Quiz And Survey Master <= 8.1.15 - Cross-Site Request Forgery via 'display_results' ↗
    2023-09-12 Cross-Site Request Forgery Affects < 8.1.15 Patched in 8.1.16
  48. Patched Medium · 6.4 Quiz And Survey Master <= 8.1.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via Question Title ↗
    2023-07-17 CVE-2023-3575 Improper Neutralization of Input During Web Page Generation Affects <= 8.1.10 Patched in 8.1.11
  49. Patched Medium · 5.3 Quiz And Survey Master <= 8.1.10 - Excessive Quiz Attempts ↗
    2023-07-17 CVE-2023-37984 Improper Control of Interaction Frequency Affects <= 8.1.10 Patched in 8.1.11
  50. Patched Critical · 9.8 Quiz and Survey Master <= 8.1.4 - Unauthenticated SQL Injection ↗
    2023-04-16 CVE-2023-28787 Improper Neutralization of Special Elements used in an SQL Command Affects <= 8.1.4 Patched in 8.1.5
  51. Patched Medium · 4.3 Quiz And Survey Master <= 8.0.10 - Cross-Site Request Forgery to Quiz Restoration ↗
    2023-02-28 CVE-2023-26524 Cross-Site Request Forgery Affects <= 8.0.10 Patched in 8.1.0
  52. Patched High · 7.2 Quiz And Survey Master <= 8.0.8 - Unauthenticated Arbitrary Media Deletion ↗
    2023-02-15 CVE-2023-0291 Missing Authorization Affects <= 8.0.8 Patched in 8.0.9
  53. Patched Medium · 5.4 Quiz And Survey Master <= 8.0.8 - Cross-Site Request Forgery to Arbitrary Media Deletion ↗
    2023-02-08 CVE-2023-0292 Cross-Site Request Forgery Affects <= 8.0.8 Patched in 8.0.9
  54. Patched Medium · 4.3 Quiz And Survey Master <= 8.0.7 - Cross-Site Request Forgery ↗
    2022-12-16 CVE-2022-46862 Cross-Site Request Forgery Affects <= 8.0.7 Patched in 8.0.8
  55. Patched High · 7.2 Quiz and Survey Master <= 8.0.4 - Unauthenticated iFrame Injection via Paragraph and Short Answer ↗
    2022-11-29 CVE-2022-4032 Improper Input Validation Affects <= 8.0.4 Patched in 8.0.5
  56. Patched Medium · 5.3 Quiz and Survey Master <= 8.0.4 - Improper Input Validation ↗
    2022-11-16 CVE-2022-4033 Improper Input Validation Affects <= 8.0.4 Patched in 8.0.5
  57. Patched High · 8.8 Quiz And Survey Master <= 7.3.10 - Cross-Site Request Forgery ↗
    2022-10-23 Cross-Site Request Forgery Affects <= 7.3.10 Patched in 7.3.11
  58. Patched High · 7.2 Quiz And Survey Master <= 7.3.4 - Authenticated (Administrator+) SQL Injection ↗
    2022-10-21 CVE-2021-36898 Improper Neutralization of Special Elements used in an SQL Command Affects <= 7.3.4 Patched in 7.3.5
  59. Patched Medium · 5.4 Quiz And Survey Master <= 7.3.6 - Insecure Direct Object Reference ↗
    2022-10-21 CVE-2021-36906 Authorization Bypass Through User-Controlled Key Affects <= 7.3.6 Patched in 7.3.7
  60. Patched High · 7.2 Quiz And Survey Master <= 7.3.10 - Unauthenticated Stored Cross-Site Scripting ↗
    2022-10-21 CVE-2022-40698 Improper Neutralization of Input During Web Page Generation Affects <= 7.3.10 Patched in 7.3.11
  61. Patched Medium · 6.1 Quiz And Survey Master <= 7.3.4 - Reflected Cross-Site Scripting ↗
    2022-10-21 CVE-2021-36864 Improper Neutralization of Input During Web Page Generation Affects <= 7.3.4 Patched in 7.3.5
  62. Patched Medium · 4.3 Quiz And Survey Master <= 7.3.10 - Missing Authorization ↗
    2022-10-21 CVE-2022-41652 Missing Authorization Affects <= 7.3.10 Patched in 7.3.11
  63. Patched Medium · 6.4 Quiz And Survey Master <= 7.3.4 - Multiple Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2022-10-21 CVE-2021-36905 Improper Neutralization of Input During Web Page Generation Affects <= 7.3.4 Patched in 7.3.5
  64. Patched Medium · 6.4 Quiz And Survey Master <= 7.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2022-10-21 CVE-2021-36863 Improper Neutralization of Input During Web Page Generation Affects <= 7.3.4 Patched in 7.3.5
  65. Patched Medium · 5.3 Quiz And Survey Master <= 7.3.10 - Sensitive Information Disclosure ↗
    2022-10-21 CVE-2022-42883 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 7.3.10 Patched in 7.3.11
  66. Patched Medium · 5.4 Quiz And Survey Master – Best Quiz, Exam and Survey Plugin for WordPress <= 7.3.4 - Insecure Direct Object Reference ↗
    2022-09-29 CVE-2021-36865 Authorization Bypass Through User-Controlled Key Affects <= 7.3.4 Patched in 7.3.5
  67. Patched Medium · 5.4 Quiz And Survey Master <= 7.3.6 - Stored Cross-Site Scripting ↗
    2022-01-12 CVE-2022-0182 Improper Neutralization of Input During Web Page Generation Affects <= 7.3.6 Patched in 7.3.7
  68. Patched High · 8.8 Quiz And Survey Master <= 7.3.6 - Cross-Site Request Forgery ↗
    2022-01-12 CVE-2022-0180 Cross-Site Request Forgery Affects <= 7.3.5 Patched in 7.3.7
  69. Patched Medium · 5.4 Quiz And Survey Master <= 7.3.6 - Reflected Cross-Site Scripting ↗
    2022-01-12 CVE-2022-0181 Improper Neutralization of Input During Web Page Generation Affects <= 7.3.6 Patched in 7.3.7
  70. Patched Medium · 4.8 Quiz And Survey Master <= 7.3.1 - Admin+ Stored Cross-Site Scripting ↗
    2021-09-13 CVE-2021-24691 Improper Neutralization of Input During Web Page Generation Affects <= 7.3.1 Patched in 7.3.2
  71. Patched Medium · 6.1 Quiz and Survey Master <= 7.1.13 - Cross-Site Scripting ↗
    2021-09-13 CVE-2021-20792 Improper Neutralization of Input During Web Page Generation Affects <= 7.1.13 Patched in 7.1.14
  72. Patched Medium · 6.1 Quiz and Survey Master <= 7.1.13 - SQL Injection ↗
    2021-08-10 Improper Neutralization of Input During Web Page Generation Affects <= 7.1.13 Patched in 7.1.14
  73. Patched Medium · 6.4 Quiz And Survey Master <= 7.1.18 - Cross-Site Scripting ↗
    2021-06-03 Improper Neutralization of Input During Web Page Generation Affects < 7.1.19 Patched in 7.1.19
  74. Patched Medium · 6.1 Quiz And Survey Master <= 7.1.17 - Reflected Cross-Site Scripting ↗
    2021-06-03 CVE-2021-24368 Improper Neutralization of Input During Web Page Generation Affects <= 7.1.17 Patched in 7.1.18
  75. Patched High · 8.8 Quiz And Survey Master <= 7.1.11 - Authenticated SQL injection via shortcode ↗
    2021-03-26 CVE-2021-24221 Improper Neutralization of Special Elements used in an SQL Command Affects <= 7.1.11 Patched in 7.1.12
  76. Patched Critical · 9.8 Quiz and Survey Master <= 7.0.1 - Arbitrary File Upload ↗
    2020-08-29 Unrestricted Upload of File with Dangerous Type Affects <= 7.0.1 Patched in 7.0.2
  77. Patched High · 8.2 Quiz and Survey Master <= 7.0.0 - Unauthenticated Arbitrary File Deletion ↗
    2020-08-03 CVE-2020-35951 Authorization Bypass Through User-Controlled Key Affects < 7.0.1 Patched in 7.0.1
  78. Patched Critical · 9.8 Quiz and Survey Master <= 7.0.0 - Arbitrary File Upload ↗
    2020-08-03 CVE-2020-35949 Unrestricted Upload of File with Dangerous Type Affects < 7.0.1 Patched in 7.0.1
  79. Patched Medium · 6.4 Quiz and Survey Master <= 6.4.12 - Stored Cross-Site Scripting ↗
    2020-07-29 Improper Neutralization of Input During Web Page Generation Affects <= 6.4.12 Patched in 7.0.0
  80. Patched Medium · 6.1 Quiz And Survey Master <= 6.3.4 - Reflected Cross-Site Scripting ↗
    2019-11-13 CVE-2019-17599 Improper Neutralization of Input During Web Page Generation Affects <= 6.3.4 Patched in 6.3.5
  81. Patched Medium · 6.1 Quiz And Survey Master <= 6.2.1 - Cross-Site Scripting ↗
    2019-03-05 CVE-2019-9575 Improper Neutralization of Input During Web Page Generation Affects <= 6.2.1 Patched in 6.2.2
  82. Patched High · 8.8 Quiz And Survey Master <= 4.7.8 - Cross-Site Request Forgery to Stored Cross-Site Scripting ↗
    2016-12-15 CVE-2016-11085 Cross-Site Request Forgery Affects < 4.7.9 Patched in 4.7.9
  83. Patched High · 8.8 Quiz And Survey Master < 4.4.4 - Multiple SQL Injections ↗
    2015-07-16 Improper Neutralization of Special Elements used in an SQL Command Affects < 4.4.4 Patched in 4.4.4

Vulnerability records provided by Wordfence Intelligence. Copyright 2012-2026 Defiant Inc. License and terms.

CVE records: Copyright 1999-2026 The MITRE Corporation. CVE terms of use.

Behavioral tests

via WP Hive

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0.1

✓ Low memory footprint
✓ Low page-speed impact
✓ Runs on latest PHP + WP
✓ No PHP errors
✓ No JS errors
✓ Activates cleanly
✓ No resource errors
✓ No external HTTP errors
✓ Optimized database use
✓ Frequently updated

Languages

via translate.wordpress.org

Translated into 44 languages, 1 at 90% or more

Persian 100%
Russian 55%
French (Canada) 53%
Turkish 43%
Ukrainian 41%
Swedish 40%
French (France) 35%
Spanish (Mexico) 31%
Romanian 26%
Dutch 23%
Italian 17%
Japanese 17%
Spanish (Spain) 16%
Chinese (China) 13%
Bosnian 11%
Esperanto 9%
Portuguese (Brazil) 8%
Danish 6%
Thai 6%
German 3%
Spanish (Argentina) 3%
English (Australia) 2%
English (Canada) 2%
English (UK) 2%

Plus 20 more locales with partial translations.

AI assistants

How it's measured →

Whether ChatGPT and Claude name this plugin when asked the category question, and whether the readme gives them something to quote.

Not measured yet for this plugin’s topics. Its tracked searches are not among the measured topics. See the topics measured so far.

Readme readiness

8 of 8 pass · checked 26 Oct 2026

Can an assistant quote this readme? Eight deterministic checks over the wp.org listing, no model involved.

  • ✓ Says what it does "Quiz maker & survey maker for WordPress. Build quizzes, surveys, exams & assessments with scoring, results..."
  • ✓ Has a FAQ 8 questions in the FAQ.
  • ✓ FAQ asks real questions 8 of 8 read like questions a user would type.
  • ✓ Names who it is for Names its audience or use cases ("perfect for", "built for", "who needs").
  • ✓ Names what it works with Mentions Block editor, Mailchimp, ActiveCampaign.
  • ✓ Headings and lists 7 headings and 3 lists.
  • ✓ Enough to quote 3,139 characters of description.
  • ✓ Tags match the text All 5 tags appear in the text.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

  1. 2020-12-01 30K+ → 40K+ up after 338 days in tier
  2. 2019-12-29 20K+ → 30K+ up after 695 days in tier
  3. 2018-02-02 10K+ → 20K+ up after 682 days in tier
  4. 2016-03-22 9K+ → 10K+ up after 112 days in tier
  5. 2015-12-01 8K+ → 9K+ up after 73 days in tier
  6. 2015-09-19 7K+ → 8K+ up after 115 days in tier
  7. 2015-05-27 6K+ → 7K+ up

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

Embed this report card

Drop a live Pulse card for Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker into a readme, a review or a deck. It updates itself.

<iframe src="https://plugins.wpmayor.com/embed/quiz-master-next" width="480" height="300" style="border:0" loading="lazy" title="Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker — Plugin Pulse"></iframe>
Preview card ↗

Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker: 40K+ active installs, 4.7★ (1,282 reviews). Plugin Pulse (WP Mayor), as of 2026-10-31. https://plugins.wpmayor.com/plugin/quiz-master-next

Spotted a number that looks wrong? Report a data issue and we'll check it against the source.