Lucene search
+L

4 matches found

RedhatCVE
RedhatCVE
•added 2025/05/23 9:39 a.m.•20 views

CVE-2024-1078

The Quiz Maker plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the aysquickstart and addquestionrows functions in all versions up to, and including, 6.5.2.4. This makes it possible for authenticated attackers, with subscriber-level acce...

4.3CVSS6.6AI score0.00356EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2024/02/07 8:15 a.m.•21 views

CVE-2024-1078

The Quiz Maker plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the aysquickstart and addquestionrows functions in all versions up to, and including, 6.5.2.4. This makes it possible for authenticated attackers, with subscriber-level acce...

4.3CVSS7.4AI score0.00356EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/02/07 7:32 a.m.•49 views

CVE-2024-1078 Quiz Maker <= 6.5.2.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Quiz Creation & Modification

The Quiz Maker plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the aysquickstart and addquestionrows functions in all versions up to, and including, 6.5.2.4. This makes it possible for authenticated attackers, with subscriber-level acce...

4.3CVSS4.7AI score0.00356EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/07 12:00 a.m.•10 views

CVE-2024-1078: Missing Authorization

The Quiz Maker plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the aysquickstart and addquestionrows functions in all versions up to, and including, 6.5.2.4. This makes it possible for authenticated attackers, with subscriber-level acce...

4.3CVSS5.8AI score0.00356EPSS
SaveExploits0References3
Rows per page
Query Builder