2342 matches found
CVE-2025-68594
Missing Authorization vulnerability in Opinion Stage Poll, Survey & Quiz Maker Plugin by Opinion Stage social-polls-by-opinionstage allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Poll, Survey & Quiz Maker Plugin by Opinion Stage: from n/a through =...
WordPress Quiz Maker 6.7.0.56 - SQL Injection
Exploit Title: WordPress Quiz Maker 6.7.0.56 - SQL Injection Date: 2025-12-16 Exploit Author: Rahul Sreenivasan Tr0j4n Vendor Homepage: https://ays-pro.com/wordpress/quiz-maker Software Link: https://wordpress.org/plugins/quiz-maker/ Version: = 6.7.0.56 Tested on: WordPress 6.x with Quiz Maker...
CVE-2025-68594
The CVE CVE-2025-68594 concerns the Poll, Survey & Quiz Maker Plugin by Opinion Stage for WordPress. It is a Missing Authorization vulnerability (broken access control) affecting the plugin up to version 19.12.0. Wordfence reports the issue in a vulnerability list, noting the CVSS base score of 5...
CVE-2025-14385
CVE-2025-14385 (WP Recipe Maker) : The WordPress plugin WP Recipe Maker is vulnerable to Stored Cross‑Site Scripting via the name attribute in the wprm-recipe-roundup-item shortcode in all versions up to 10.2.3. The vulnerability can be exploited by an authenticated attacker with Contributor-leve...
CVE-2025-14385 WP Recipe Maker <= 10.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
The WP Recipe Maker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'name' parameter in all versions up to, and including, 10.2.3 due to insufficient input sanitization and output escaping on user-supplied attributes in the wprm-recipe-roundup-item shortcode. This makes ...
EUVD-2025-203869
The WP Recipe Maker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'name' parameter in all versions up to, and including, 10.2.3 due to insufficient input sanitization and output escaping on user-supplied attributes in the wprm-recipe-roundup-item shortcode. This makes ...
WordPress WP Recipe Maker plugin <= 10.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting via Shortcode vulnerability discovered by Abhinav Jaswal wrathexe - Self employed in WordPress Plugin WP Recipe Maker versions = 10.2.3...
PT-2025-51395
Name of the Vulnerable Software and Affected Versions edmon.parker Read More & Accordion versions through 3.5.4.1 Description An authorization issue exists in edmon.parker Read More & Accordion expand-maker, allowing exploitation of incorrectly configured access control security levels...
WordPress WP Recipe Maker plugin <= 10.2.2 - Insecure Direct Object Reference to Sensitive Information Exposure vulnerability
Insecure Direct Object Reference to Sensitive Information Exposure vulnerability discovered by Dmitrii Ignatyev - CleanTalk Inc in WordPress Plugin WP Recipe Maker versions = 10.2.2...
Improper Permission Assignment
Strimzi is vulnerable to Improper Permission Assignment. The vulnerability is due to Strimzi creating an incorrect Kubernetes Role that grants Kafka Connect and MirrorMaker 2 operands GET access to all Secrets in the namespace, allowing these components to read sensitive data they should not have...
CVE-2025-67595
Cross-Site Request Forgery CSRF vulnerability in Ays Pro Quiz Maker quiz-maker allows Cross Site Request Forgery.This issue affects Quiz Maker: from n/a through = 6.7.0.82...
CVE-2025-67595
Cross-Site Request Forgery CSRF vulnerability in Ays Pro Quiz Maker quiz-maker allows Cross Site Request Forgery.This issue affects Quiz Maker: from n/a through = 6.7.0.82...
CVE-2025-67595
Cross-Site Request Forgery CSRF vulnerability in Ays Pro Quiz Maker quiz-maker allows Cross Site Request Forgery.This issue affects Quiz Maker: from n/a through = 6.7.0.82...
CVE-2025-67595 WordPress Quiz Maker plugin <= 6.7.0.82 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability in Ays Pro Quiz Maker quiz-maker allows Cross Site Request Forgery.This issue affects Quiz Maker: from n/a through = 6.7.0.82...
EUVD-2025-202058
Cross-Site Request Forgery CSRF vulnerability in Ays Pro Quiz Maker quiz-maker allows Cross Site Request Forgery.This issue affects Quiz Maker: from n/a through = 6.7.0.82...
CVE-2025-67595 WordPress Quiz Maker plugin <= 6.7.0.82 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability in Ays Pro Quiz Maker quiz-maker allows Cross Site Request Forgery.This issue affects Quiz Maker: from n/a through = 6.7.0.82...
CVE-2025-67595
CVE-2025-67595 is a CSRF vulnerability in the WordPress plugin Quiz Maker (affected: 6.7.0.82 and earlier). Public sources (NVD, Red Hat, CVE list, Patchstack, Wordfence) corroborate a CSRF flaw that can be triggered by an authenticated actor. Current entries indicate the vulnerability has been p...
WordPress plugin Quiz Maker 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...
PT-2025-49969
Name of the Vulnerable Software and Affected Versions Ays Pro Quiz Maker versions through 6.7.0.82 Description A Cross-Site Request Forgery issue exists in Ays Pro Quiz Maker. This allows attackers to potentially perform actions on behalf of an authenticated user without their knowledge. The issu...
PT-2026-25547
Name of the Vulnerable Software and Affected Versions mlflow versions prior to 3.7.0 Description A command injection issue exists due to the direct interpolation of user-supplied container image names into shell commands without proper sanitization. These commands are then executed using the...