SEPTEMBER 15, 2026
Live Feed
Back to database
Case File

CVE-2026-14821

LOW · CVSS 2.7 EPSS 0.17%

Source: NVD + CISA KEV + EPSS · Published 2026-07-28 · Last synced 2026-08-27

CyberRota Analysis

AI-Generated

The Quiz and Survey Master plugin for WordPress versions prior to 11.1.5 is vulnerable to unauthorized deletion of output templates due to a lack of capability checks. This flaw allows users with contributor-level access and higher to delete arbitrary templates, potentially disrupting site functionality and content integrity. WordPress site administrators using this plugin should prioritize updating to version 11.1.5 or later to mitigate this risk.

CVE
CVE-2026-14821
Severity
LOW
CVSS
2.7
EPSS
0.17%
WordPress

Original NVD Description

The Quiz and Survey Master (QSM) WordPress plugin before 11.1.5 does not perform a capability check before deleting output templates, allowing users with contributor-level access and above to delete arbitrary templates.