CVE-2026-14821 — Quiz And Survey Master < 11.1.5 - Contributor+ Arbitrary Template Deletion
The Quiz and Survey Master (QSM) WordPress plugin before 11.1.5 does not perform a capability check before deleting output templates, allowing users with contributor-level acce…
Published: 2026-07-28 · CVSS: 2.7 · CVSS 3.1
The Quiz and Survey Master (QSM) WordPress plugin before 11.1.5 does not perform a capability check before deleting output templates, allowing users with contributor-level access and above to delete arbitrary templates.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7