Quiz Maker by AYS

81 Quality Score

Active Installs

19/30

With 20,000 active installs it is a mid-tier player, considerably smaller than the 100,000-install Tutor LMS but in line with focused quiz tools.

Update Freshness

25/25

A last update dated July 2026 and a tested-against WordPress 7.0.1 tag indicate the developer is actively shipping and keeping pace with core releases.

User Rating

15/15

A 98 out of 100 across 592 reviews is an exceptional satisfaction score and suggests very few users regret the install.

Support Health

8/15

20 of 22 support threads resolved, a 90.9% closure rate, points to a responsive and effective support presence.

WP Compatibility

15/15

Requires PHP 7.0 and WordPress 4.0, and is tested with the latest WordPress 7.0.1, giving it a broad compatibility window for older and newer sites alike.

Scores higher than 86% of indexed plugins

About

QUIZ MAKER plugin allows you to make an unlimited number of Quizzes, Exams and Tests

Active Installs 20k+

Rating ★★★★½ 4.9/5

Last Updated 2026-09-24 8:55am GMT

Requires WordPress 4.0+

Tested Up To 7.1.2

Requires PHP 7.0+

Security History

25 known vulnerabilities, all patched

1 Critical 5 High 19 Medium

Most recent: May 1, 2026

View details ▸

Quiz Maker by AYS <= 6.7.1.29 - Unauthenticated Stored Cross-Site Scripting via 'rate_reason' Medium

May 1, 2026 Patched in ["6.7.1.30"] CVE-2026-6817

Quiz Maker <= 6.7.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Medium

February 19, 2026 Patched in ["6.7.1.8"] CVE-2026-2384

Quiz Maker <= 6.7.1.2 - Cross-Site Request Forgery Medium

February 10, 2026 Patched in ["6.7.1.3"] CVE-2026-32342

Quiz Maker <= 6.7.0.88 - Authenticated (Admin+) Stored Cross-Site Scripting Medium

December 22, 2025 Patched in ["6.7.0.89"] CVE-2025-14579

Quiz Maker <= 6.7.0.82 - Cross-Site Request Forgery Medium

December 2, 2025 Patched in ["6.7.0.83"] CVE-2025-67595

Quiz Maker <= 6.7.0.80 - Unauthenticated Sensitive Information Exposure Medium

November 18, 2025 Patched in ["6.7.0.81"] CVE-2025-12426

Quiz Maker <= 6.7.0.64 - Cross-Site Request Forgery Medium

September 22, 2025 Patched in ["6.7.0.65"] CVE-2025-58014

Quiz Maker <= 6.7.0.65 - Unauthenticated Sensitive Information Exposure Medium

September 22, 2025 Patched in ["6.7.0.66"] CVE-2025-58015

Quiz Maker <= 6.7.0.56 - Unauthenticated SQL Injection Medium

September 16, 2025 Patched in ["6.7.0.57"] CVE-2025-10042

Quiz Maker <= 6.6.8.7 - Unauthenticated SQL Injection High

March 29, 2025 Patched in ["6.6.8.8"] CVE-2025-30774

Quiz Maker Business, Developer, and Agency <= (Multiple Versions) - Reflected DOM-Based Cross-Site Scripting via content Medium

January 25, 2025 Patched in ["31.8.0.100"] CVE-2024-10636

Quiz Maker Business, Developer, and Agency <= (Multiple Versions) - Unauthenticated SQL Injection via id High

January 25, 2025 Patched in ["31.8.0.100"] CVE-2024-10628

Quiz Maker Business, Developer, and Agency <= (Multiple Versions) - Missing Authorization to Google Sheets Integration Credentials Modification and Stored Cross-Site Scripting High

January 25, 2025 Patched in ["31.8.0.100"] CVE-2024-10574

Quiz Maker Business, Developer, and Agency <= (Multiple Versions) - Unauthenticated Arbitrary Shortcode Execution via content High

January 25, 2025 Patched in ["31.8.0.100"] CVE-2024-10633

Quiz Maker <= 6.5.9.8 - Authenticated (Admin+) Stored Cross-Site Scripting Medium

September 16, 2024 Patched in ["6.5.9.9"] CVE-2024-8617

Quiz Maker <= 6.5.8.3 - Unauthenticated SQL Injection via 'ays_questions' Parameter Critical

June 24, 2024 Patched in ["6.5.8.4"] CVE-2024-6028

Quiz Maker <= 6.5.2.4 - Missing Authorization to Unauthenticated Quiz Data Retrieval Medium

February 6, 2024 Patched in ["6.5.2.5"] CVE-2024-1079

Quiz Maker <= 6.5.2.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Quiz Creation & Modification Medium

February 6, 2024 Patched in ["6.5.2.5"] CVE-2024-1078

Quiz Maker <= 6.5.0.5 - Denial of Service Medium

January 12, 2024 Patched in ["6.5.0.6"] CVE-2024-22027

Quiz Maker <= 6.5.1.1 - Missing Authorization Medium

January 5, 2024 Patched in ["6.5.1.2"] CVE-2024-21743

Quiz Maker <= 6.4.9.4 - Reflected Cross-Site Scripting Medium

November 30, 2023 Patched in ["6.4.9.5"] CVE-2023-6166

Quiz Maker <= 6.4.9.4 - Missing Authorization to Email Disclosure Medium

November 30, 2023 Patched in ["6.4.9.5"] CVE-2023-6155

Quiz Maker <= 6.4.2.6 - Reflected Cross-Site Scripting Medium

May 15, 2023 Patched in ["6.4.2.7"] CVE-2023-2571

Quiz Maker <= 6.3.9.4 - Content Spoofing Medium

January 20, 2023 Patched in ["6.3.9.5"] CVE-2023-23985

Quiz Maker <= 6.2.0.8 - SQL Injection High

June 29, 2021 Patched in ["6.2.0.9"] CVE-2021-24456

What It Does

Quiz Maker by AYS lets WordPress site owners build unlimited quizzes, exams, and tests through a form-based admin without writing code. Quizzes can be embedded via shortcode and results are tracked in the WordPress dashboard, with add-on extensions for features like certificates, email reports, and payment integrations. It is a self-contained quiz builder rather than a full learning management system.

Who It's For

This plugin fits educators, corporate trainers, and small business owners who need a dedicated quiz or assessment tool on a WordPress site and do not require a full LMS. It is well suited to lead generation and customer engagement use cases where a standalone quiz form is the goal. Sites that need basic quizzes quickly, with optional paid extensions for advanced reporting, will find it practical.

Who Should Skip It

Anyone building a full online course platform with graded lessons, course progression, and student dashboards should look at Tutor LMS or LearnPress instead. If you only need lightweight polling or simple form fields, a contact form plugin with quiz add-ons will be lighter and cheaper.

The Bottom Line

Quiz Maker by AYS delivers a focused, well-maintained quiz solution with outstanding user ratings and a near-perfect support closure rate. Its 20,000 installs lag behind top LMS competitors, so it is best treated as a best-of-breed quiz tool rather than a course platform. Recommended for sites where quizzes are the main feature, not a footnote inside a larger LMS.

Pick Tutor LMS when you need full course management, instructors, and monetization rather than just quizzes.

Interactive Content – H5P 83/100

Choose H5P when you want interactive content types like video quizzes and drag-and-drop activities beyond standard multiple choice.

Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker 82/100

Go with QSM if you want a similar quiz builder with a long-standing track record and deep free feature set.

LearnPress – WordPress LMS Plugin for Create and Sell Online Courses 82/100

Select LearnPress for a free, full LMS experience where quizzes are one component inside structured courses.

Uncanny Toolkit for LearnDash 81/100

Pick this toolkit only if you already run LearnDash and need to extend its quiz and learner experience.