CVE-2026-103917 | expresstech Quiz and Survey Master Plugin up to 11.2.7 on WordPress Shortcode Execution do_shortcode improper authorization

November 7, 2026 Yanac

A vulnerability classified as critical has been found in expresstech Quiz and Survey Master Plugin up to 11.2.7 on WordPress. This affects the function do_shortcode of the component Shortcode Execution. The manipulation leads to improper authorization.

This vulnerability is listed as CVE-2026-103917. The attack may be initiated remotely. There is no available exploit.VulDB Recent EntriesRead More