https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T15:59:14.367125+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-341380 EUVD-2026-341380 2026-10-12T15:59:14.370832+00:00 EUVD-2026-341380 https://cve.radiocsirt.org/vuln/fkie_cve-2026-14820 fkie_cve-2026-14820 2026-10-12T15:59:14.370861+00:00

The Quiz and Survey Master (QSM) WordPress plugin before 11.1.3 does not implement rate limiting or standard failed-login auditing on its front-end credential-check functionality and returns distinct responses for valid and invalid accounts, allowing unauthenticated attackers to enumerate valid usernames and to brute-force passwords while bypassing brute-force protection Quiz and Survey Master (QSM) WordPress plugin before 11.1.3.

 https://cve.radiocsirt.org/vuln/ghsa-95j9-j2xw-62q9 GHSA-95j9-j2xw-62q9 2026-10-12T15:59:14.370891+00:00

The Quiz and Survey Master (QSM) WordPress plugin before 11.1.3 does not implement rate limiting or standard failed-login auditing on its front-end credential-check functionality and returns distinct responses for valid and invalid accounts, allowing unauthenticated attackers to enumerate valid usernames and to brute-force passwords while bypassing brute-force protection Quiz and Survey Master (QSM) WordPress plugin before 11.1.3.