CVE-2025-12426

CVE-2025-12426 affects the WordPress Quiz Maker plugin (

CVE-2025-12426: Exposure of Sensitive Information to an Unauthorized Actor

The Quiz Maker plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 6.7.0.80. This is due to the plugin exposing quiz answers through the aysquizcheckanswer AJAX action without proper authorization checks. The endpoint only validates a nonce,...