Skip to content
PluginCanary

Quiz and Survey Master (QSM)

Quiz and Survey Master (QSM) - Quiz Maker & Survey Maker
by ExpressTech Systems · 40,000+ active installs · Checked 3 Nov 2026
Watch

Watch: held back by a low Support score (50 of 100).

78/ 100 Canary Score
Sub-scores for Quiz and Survey Master (QSM)
Ownership100
Maintenance100
Security60
Support50
Reputation70

How the score works

Quick answers

Is Quiz and Survey Master (QSM) still maintained?
Yes. Last release 2 Nov 2026, 42 releases in the last 24 months. 2 Nov 2026 · wordpress.org
Who owns Quiz and Survey Master (QSM), and has it changed hands?
No change recorded. Main committer expresstech since Feb 2020. 3 Nov 2026 · SVN log
Was Quiz and Survey Master (QSM) removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
Is Quiz and Survey Master (QSM) safe?
82 known vulnerabilities, all fixed (latest in 11.2.8). Not on the exploited list. 17 Oct 2026 · Wordfence Intelligence
Is the latest Quiz and Survey Master (QSM) update safe to install?
No ownership change before 11.3.0. No one-star spike after it. 2 Nov 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
fpcorso10 Sep 2013 to 20 Feb 2019, 855 commits
quizsurvey8 Mar 2019 to 6 Feb 2020, 47 commits
expresstech27 Feb 2020 to 2 Nov 2026, 346 commits

3 committers recorded. No ownership change since 2013.

Maintenance

Last release
2 days ago
Releases, 24 months
42
Tested up to
7.1 current
Requires PHP
5.4 supported 8.2+
Releases per quarter
Releases per quarter for Quiz and Survey Master (QSM)
Q1 20244
Q2 20245
Q3 20244
Q4 20245
Q1 20254
Q2 20255
Q3 20255
Q4 20255
Q1 20263
Q2 20267
Q3 20267
Q4 20263

Last release 2 Nov 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: 3.7 (3 reviews). Lifetime: 4.7.

Average rating per quarter for Quiz and Survey Master (QSM)
Q3 20245.0
Q4 20244.3
Q1 20253.0
Q2 20254.3
Q3 20254.2
Q4 20255.0
Q1 20265.0
Q3 20263.7

Average rating fell from 5.0 to 3.7 between Q3 2024 and Q3 2026.

Rating distribution
5 star1135
4 star67
3 star18
2 star18
1 star44
Latest low reviews

Security record

35 vulnerabilities in 24 months (82 on record), all patched (latest fixed in 11.2.8).

Show 82 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
17 Oct 2026Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker <= 11.2.7 - Authenticated (Contributor+) PHP Object Injection7.5<= 11.2.711.2.8Patched before disclosure
12 Oct 2026Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker <= 11.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 11.2.711.2.8Patched before disclosure
9 Oct 2026Quiz and Survey Master (QSM) <= 11.2.6 - Unauthenticated Stored DOM-Based Cross-Site Scripting via 'qsm_hidden_questions' Parameter7.2<= 11.2.611.2.7Patched before disclosure
7 Oct 2026Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker <= 11.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 11.2.711.2.8Patched before disclosure
7 Oct 2026Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker <= 11.2.7 - Authenticated (Contributor+) PHP Object Injection7.5<= 11.2.711.2.8Patched before disclosure
30 Sep 2026Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker <= 11.2.6 - Unauthenticated Stored Cross-Site Scripting7.2<= 11.2.611.2.7Patched before disclosure
10 Sep 2026Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker <= 11.2.5 - Unauthenticated Insecure Direct Object Reference5.3<= 11.2.511.2.6Patched before disclosure
28 Aug 2026Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker < 11.2.4 - Authenticated (Contributor+) Insecure Direct Object Reference4.3< 11.2.411.2.4Patched before disclosure
17 Aug 2026Quiz And Survey Master <= 11.2.3 - Authenticated (Contributor+) Insecure Direct Object Reference4.3<= 11.2.311.2.4Patched before disclosure
17 Aug 2026Quiz And Survey Master <= 11.2.3 - Authenticated (Contributor+) Insecure Direct Object Reference4.3<= 11.2.311.2.4Patched before disclosure
15 Aug 2026Quiz and Survey Master (QSM) <= 11.2.1 - Authenticated (Contributor+) SQL Injection via 'randon_category' Quiz Option6.5<= 11.2.111.2.2Patched before disclosure
15 Aug 2026Quiz and Survey Master (QSM) <= 11.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'question_title' Parameter6.4<= 11.2.111.2.2Patched before disclosure
27 Jul 2026Quiz And Survey Master <= 11.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 11.2.111.2.2Patched before disclosure
22 Jul 2026Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker <= 11.2.0 - Authenticated (Contributor+) SQL Injection6.5<= 11.2.011.2.1Patched before disclosure
15 Jul 2026Quiz and Survey Master (QSM) <= 11.2.0 - Authenticated (Custom+) SQL Injection via 'pages' Parameter6.5<= 11.2.011.2.1Patched before disclosure
7 Jul 2026Quiz And Survey Master <= 11.1.4 - Missing Authorization4.3<= 11.1.411.1.5Patched before disclosure
2 Jul 2026Quiz and Survey Master (QSM) <= 11.1.4 - Missing Authorization to Authenticated (Contributor+) Arbitrary Quiz Modification and Email Reroute via Leaked Nonce from /quiz/structure4.3<= 11.1.411.1.5Patched before disclosure
26 Jun 2026Quiz and Survey Master (QSM) <= 11.1.4 - Missing Authorization to Authenticated (Contributor+) Arbitrary Modification via qsm_insert_quiz_template AJAX Action4.3<= 11.1.411.1.5Patched before disclosure
5 Jun 2026Quiz and Survey Master (QSM) <= 11.1.2 - Authenticated (Admin+) SQL Injection via 'order' and 'limit' Parameters4.9<= 11.1.211.1.3Patched before disclosure
3 Jun 2026Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker <= 11.1.2 - Unauthenticated Stored Cross-Site Scripting7.2<= 11.1.211.1.3Patched before disclosure
23 Apr 2026Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker <= 11.0.0 - Unauthenticated Stored Cross-Site Scripting7.2<= 11.0.011.1.0Patched before disclosure
16 Apr 2026Quiz and Survey Master (QSM) <= 11.1.0 - Unauthenticated Shortcode Injection Leading to Arbitrary Quiz Result Disclosure via Quiz Answer Text Input Fields5.3<= 10.1.011.1.1Patched before disclosure
23 Mar 2026Quiz and Survey Master (QSM) <= 10.3.5 - Authenticated (Contributor+) SQL Injection via 'merged_question' Parameter6.5<= 10.3.511.0.0Patched before disclosure
5 Feb 2026Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker <= 10.3.4 - Missing Authorization4.3<= 10.3.410.3.5Patched before disclosure
1 Feb 2026Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker <= 10.3.4 - Unauthenticated Insecure Direct Object Reference5.3<= 10.3.410.3.5Patched before disclosure

Changelog mentions of security fixes: 11.2.7 (security); 11.2.8 (security, vulnerability, XSS); 11.2.9 (security, XSS); 11.3.0 (security, SQL injection).

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

50% of 6 support threads resolved in the last 2 months.

Momentum

40,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Quiz and Survey Master (QSM)
4 May 20261,077
11 May 202616,484
18 May 20264,782
25 May 202628,901
1 Jun 20265,402
8 Jun 202615,202
15 Jun 20264,514
22 Jun 20262,818
29 Jun 202616,882
6 Jul 20264,813
13 Jul 202628,611
20 Jul 20266,058
27 Jul 202616,450
3 Aug 20265,115
10 Aug 202617,604
17 Aug 20263,880
24 Aug 202617,016
31 Aug 202615,423
7 Sep 20265,415
14 Sep 20264,489
21 Sep 202615,997
28 Sep 20264,918
5 Oct 202619,549
12 Oct 20263,241
19 Oct 202615,659
26 Oct 20266,726
2 Nov 20264,717

Weekly downloads over the last 4 weeks are 30% below the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

Crowdsignal DashboardScore 89 · 200,000+WP-PollsScore 89 · 40,000+UserFeedbackScore 87 · 200,000+Crowdsignal FormsScore 87 · 200,000+Quiz Maker by AYSScore 84 · 20,000+

Facts

Version11.3.0
AuthorExpressTech Systems
Added10 Sep 2013
Last updated2 Nov 2026
Active installs40,000+
Requires WordPress5.0
Tested up to7.1.4
Requires PHP5.4
CategoryForms & Data Collection > Quiz & Assessment Forms
Tagsexam, quiz, survey, quiz maker, survey maker

Other plugins by this author: Responsive Menu - Mobile Menu & Hamburger Menu Builder, Users Ultra Pro reCaptcha 3.0 Add-on, Easy WP Members reCaptcha Add-on, WP Users Pro Subscriptions Plugin - Posts, Pages and Partial Content Protection., Ultimate Captcha reCAPTCHA Plugin for WordPress, WP Ticket Ultra reCaptcha Add-on

Questions

Is Quiz and Survey Master (QSM) still maintained?

Yes. Last release 2 Nov 2026, 42 releases in the last 24 months.

Who owns Quiz and Survey Master (QSM), and has it changed hands?

No change recorded. Main committer expresstech since Feb 2020.

Was Quiz and Survey Master (QSM) removed from wordpress.org?

No. Listed on wordpress.org as of 3 Nov 2026.

Is Quiz and Survey Master (QSM) safe?

82 known vulnerabilities, all fixed (latest in 11.2.8). Not on the exploited list.

Is the latest Quiz and Survey Master (QSM) update safe to install?

No ownership change before 11.3.0. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 3 Nov 2026.Report a data issue