2026-07-16 · 2 min · BitNinja Team

Critical SQL Injection Vulnerability Alert for WordPress Plugin

The Quiz Master Next (QSM) plugin for WordPress has a critical vulnerability that server administrators must address. This flaw, identified as CVE-2026-13767, allows for SQL injection through the 'pages' parameter. With versions up to 11.2.0 affected, system admins must take i...