EUVD-2025-29690

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

Quiz Maker WordPress plugin is vulnerable to SQL injection via spoofed IP headers, data access possible.

Reporter	Title	Published	Views	Family All 14
GithubExploit	Exploit for SQL Injection in Ays-Pro Quiz_Maker	5 Feb 202622:02	–	githubexploit
Circl	CVE-2025-10042	25 Dec 202518:30	–	circl
CNNVD	WordPress plugin Quiz Maker SQL注入漏洞	17 Sep 202500:00	–	cnnvd
CNVD	WordPress Quiz Maker plugin SQL Injection Vulnerability	19 Sep 202500:00	–	cnvd
CVE	CVE-2025-10042	17 Sep 202505:18	–	cve
Cvelist	CVE-2025-10042 Quiz Maker <= 6.7.0.56 - Unauthenticated SQL Injection	17 Sep 202505:18	–	cvelist
Exploit DB	WordPress Quiz Maker 6.7.0.56 - SQL Injection	25 Dec 202500:00	–	exploitdb
NVD	CVE-2025-10042	17 Sep 202506:15	–	nvd
Packet Storm	📄 WordPress Quiz Maker 6.7.0.56 SQL Injection	7 Jan 202600:00	–	packetstorm
Patchstack	WordPress Quiz Maker plugin <= 6.7.0.56 - Unauthenticated SQL Injection vulnerability	16 Sep 202522:41	–	patchstack

[
  {
    "enisaIdVendor": [
      {
        "id": "671068b7-7a43-302a-ae2d-d8c7ccab750c",
        "vendor": {
          "name": "ays-pro"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "92a1adec-0fe9-3d78-9852-905d1a85f229",
        "product": {
          "name": "Quiz Maker"
        },
        "product_version": "* ≤6.7.0.56"
      }
    ]
  }
]

Source	Link
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/4eeae6dd-a41f-4878-aa92-064ec78367d7
plugins	www.plugins.trac.wordpress.org/browser/quiz-maker/tags/6.7.0.52/public/class-quiz-maker-public.php
plugins	www.plugins.trac.wordpress.org/browser/quiz-maker/tags/6.7.0.52/public/class-quiz-maker-public.php
plugins	www.plugins.trac.wordpress.org/browser/quiz-maker/tags/6.7.0.57/public/class-quiz-maker-public.php
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-10042

03 Oct 2025 20:07Current

6.5Medium risk

Vulners AI Score6.5

CVSS 3.15.9

EPSS0.00072

SSVC