Known vulnerabilities in Quiz Maker by AYS

QUIZ MAKER plugin allows you to make an unlimited number of Quizzes, Exams and Tests

25Reported vulnerabilities

9.8Highest CVSS score

6.7.1.69Latest version

20,000+Active installs

What to do now

Update Quiz Maker by AYS to 6.7.1.30 or later. 25 of these have a fixed version available. Updating resolves them.

Plugin last updated: August 17, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVE	Severity	Exploit probability next 30 days	Affected versions	Fixed in	Published
CVE-2024-6028	Critical 9.8	11.8%	Before 6.5.8.4	`6.5.8.4`	June 25, 2024
CVE-2023-2571	Medium 6.1	2.1%	Before 6.4.2.7	`6.4.2.7`	June 5, 2023
CVE-2023-6166	Medium 6.1	0.4%	Before 6.4.9.5	`6.4.9.5`	December 26, 2023
CVE-2023-6155	Medium 5.3	0.6%	Before 6.4.9.5	`6.4.9.5`	December 26, 2023
CVE-2024-8617	Medium 4.8	0.3%	Before 6.5.9.9	`6.5.9.9`	May 15, 2025
CVE-2025-10042	High 7.5	0.9%	Before 6.7.0.57	`6.7.0.57`	September 17, 2025
CVE-2024-10628	High 7.5	0.7%	20.0.0 to 21.8.0 (inclusive)	`21.8.0.100`	January 25, 2025
CVE-2021-24456	High 7.2	1.3%	Before 6.2.0.9	`6.2.0.9`	August 2, 2021
CVE-2025-12426	High 7.5	0.3%	Before 6.7.0.81	`6.7.0.81`	November 19, 2025
CVE-2025-30774	High 7.5	0.4%	6.6.8.7 and earlier	`6.6.8.8`	March 29, 2025
CVE-2024-10633	High 7.3	0.5%	20.0.0 to 21.8.0 (inclusive)	`21.8.0.100`	January 25, 2025
CVE-2024-10574	High 7.2	0.5%	20.0.0 to 21.8.0 (inclusive)	`21.8.0.100`	January 25, 2025
CVE-2024-22027	Medium 6.5	0.7%	Before 6.5.0.6	`6.5.0.6`	January 12, 2024
CVE-2026-2384	Medium 6.4	0.2%	0 to 6.7.1.7 (inclusive)	`6.7.1.8`	February 20, 2026
CVE-2024-10636	Medium 6.1	0.3%	20.0.0 to 21.8.0 (inclusive)	`21.8.0.100`	January 25, 2025
CVE-2026-6817	Medium 5.8	0.2%	0 to 6.7.1.29 (inclusive)	`6.7.1.30`	May 2, 2026
CVE-2024-1079	Medium 5.3	0.5%	Before 6.5.2.5	`6.5.2.5`	February 7, 2024
CVE-2025-58015	Medium 5.3	0.3%	6.7.0.65 and earlier	`6.7.0.66`	September 22, 2025
CVE-2023-23985	Medium 5.3	0.4%	6.3.9.4 and earlier	`6.3.9.5`	January 20, 2023
CVE-2026-32342	Medium 4.3	0.1%	6.7.1.2 and earlier	`6.7.1.3`	February 10, 2026
CVE-2025-14579	Medium 4.4	0.2%	6.7.0.88 and earlier	`6.7.0.89`	December 22, 2025
CVE-2025-67595	Medium 4.3	0.1%	6.7.0.82 and earlier	`6.7.0.83`	December 2, 2025
CVE-2025-58014	Medium 4.3	0.1%	6.7.0.64 and earlier	`6.7.0.65`	September 22, 2025
CVE-2024-1078	Medium 4.3	0.4%	Before 6.5.2.5	`6.5.2.5`	February 7, 2024
CVE-2024-21743	Medium 4.3	0.4%	6.5.1.1 and earlier	`6.5.1.2`	January 5, 2024

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.