Vendor
A deserialization of untrusted data vulnerability in the Quiz And Survey Master WordPress plugin (CVE-2026-111408) allows for object injection, potentially leading to arbitrary code execution.