Lucene search
HistoryDec 26, 2023 - 7:15 p.m.
CVE-2023-6155
wordpress
quiz maker
authorization
ajax
unauthenticated
user email addresses
5.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
0.001 Low
EPSS
Percentile
31.1%
The Quiz Maker WordPress plugin before 6.4.9.5 does not adequately authorize the ays_quiz_author_user_search AJAX action, allowing an unauthenticated attacker to perform a search for users of the system, ultimately leaking user email addresses.
Affected configurations
Node
ays-proquiz_makerRange<6.4.9.5wordpress
Related
prion
prion
Code injection
2023-12-26 19:15:00
cvelist
cvelist
wpvulndb
wpvulndb
Quiz Maker < 6.4.9.5 - Unauthenticated Email Address Disclosure
2023-11-30 00:00:00
cve
cve
CVE-2023-6155
2023-12-26 19:15:08
wpexploit
wpexploit
Quiz Maker < 6.4.9.5 - Unauthenticated Email Address Disclosure
2023-11-30 00:00:00
5.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
0.001 Low
EPSS
Percentile
31.1%
Related for NVD:CVE-2023-6155