Lucene search
K

173 matches found

Nuclei
Nuclei
added yesterday27 views

WordPress Watu Quiz <3.3.9.1 - Cross-Site Scripting

WordPress Watu Quiz plugin before 3.3.9.1 is susceptible to cross-site scripting. The plugin does not sanitize and escape some parameters, such as email, dn, date, and points, before outputting then back in a page. An attacker can inject arbitrary script in the browser of an unsuspecting user in...

6.1CVSS6.1AI score0.04625EPSS
Exploits3References5
RedhatCVE
RedhatCVE
added 2026/01/09 9:31 a.m.5 views

CVE-2023-25022

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Kiboko Labs Watu Quiz plugin = 3.3.8 versions...

5.9CVSS5.6AI score0.00207EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/07 9:18 a.m.7 views

CVE-2024-2640

The Watu Quiz WordPress plugin before 3.4.1.2 does not sanitise and escape some of its settings, which could allow users such as authors if they've been authorized by admins to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

6.8CVSS5.8AI score0.00377EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/12/25 1:23 p.m.2 views

CVE-2025-68587

Missing Authorization vulnerability in Bob Watu Quiz watu allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Watu Quiz: from n/a through = 3.4.5...

4.3CVSS7AI score0.00036EPSS
Exploits0References1
EUVD
EUVD
added 2025/12/24 3:30 p.m.2 views

EUVD-2025-205248

Missing Authorization vulnerability in Bob Watu Quiz watu allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Watu Quiz: from n/a through = 3.4.5...

8.1CVSS6.5AI score0.00036EPSS
Exploits0References2
NVD
NVD
added 2025/12/24 1:16 p.m.1 views

CVE-2025-68587

Missing Authorization vulnerability in Bob Watu Quiz watu allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Watu Quiz: from n/a through = 3.4.5...

4.3CVSS0.00036EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/12/24 1:10 p.m.24 views

CVE-2025-68587 WordPress Watu Quiz plugin <= 3.4.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in Bob Watu Quiz watu allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Watu Quiz: from n/a through = 3.4.5...

4.3CVSS0.00036EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/12/24 1:10 p.m.2 views

CVE-2025-68587 WordPress Watu Quiz plugin <= 3.4.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in Bob Watu Quiz watu allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Watu Quiz: from n/a through = 3.4.5...

4.3CVSS6.6AI score0.00036EPSS
Exploits0References1
CVE
CVE
added 2025/12/24 1:10 p.m.8 views

CVE-2025-68587

Technical details for CVE-2025-68587 are not provided in the supplied documents. The Connected sources do not specify affected versions, root cause, impact, or remediation. Monitor for official updates to confirm scope and fixes.

4.3CVSS6.6AI score0.00036EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/12/24 12:0 a.m.1 views

WordPress plugin Watu Quiz 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

4.3CVSS6.6AI score0.00036EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/12/24 12:0 a.m.3 views

PT-2025-53275

Name of the Vulnerable Software and Affected Versions Watu Quiz versions through 3.4.5 Description An authorization issue exists in Watu Quiz that allows exploitation due to incorrectly configured access control security levels. Recommendations Update Watu Quiz to a version later than 3.4.5...

8.1CVSS6.6AI score0.00036EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/12/17 10:3 a.m.3 views

CVE-2025-67976

Missing Authorization vulnerability in Bob Watu Quiz watu allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Watu Quiz: from n/a through = 3.4.5...

6.5CVSS7AI score0.00038EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/12/17 3:42 a.m.3 views

WordPress Watu Quiz plugin <= 3.4.5 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by daroo in WordPress Plugin Watu Quiz versions = 3.4.5...

8.1CVSS7AI score0.00036EPSS
Exploits0Affected Software1
NVD
NVD
added 2025/12/16 9:16 a.m.3 views

CVE-2025-67976

Missing Authorization vulnerability in Bob Watu Quiz watu allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Watu Quiz: from n/a through = 3.4.5...

6.5CVSS0.00038EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/12/16 8:12 a.m.22 views

CVE-2025-67976 WordPress Watu Quiz plugin <= 3.4.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in Bob Watu Quiz watu allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Watu Quiz: from n/a through = 3.4.5...

6.5CVSS0.00038EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/12/16 8:12 a.m.1 views

CVE-2025-67976 WordPress Watu Quiz plugin <= 3.4.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in Bob Watu Quiz watu allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Watu Quiz: from n/a through = 3.4.5...

6.5CVSS6.6AI score0.00038EPSS
Exploits0References1
CVE
CVE
added 2025/12/16 8:12 a.m.5 views

CVE-2025-67976

CVE-2025-67976 describes a Missing Authorization vulnerability in Watu Quiz for WordPress, exploitable via incorrectly configured access control. Affected: Watu Quiz versions up to 3.4.5 (range shown as n/a through

6.5CVSS6.6AI score0.00038EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/12/16 12:0 a.m.1 views

WordPress plugin Watu Quiz 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

6.5CVSS6.5AI score0.00038EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/12/16 12:0 a.m.2 views

PT-2025-51438

Name of the Vulnerable Software and Affected Versions Bob Watu Quiz versions through 3.4.5 Description An authorization issue exists in Bob Watu Quiz, allowing exploitation of incorrectly configured access control security levels. This enables unauthorized access. Recommendations Update Bob Watu...

6.5CVSS6.5AI score0.00038EPSS
Exploits0References4
Patchstack
Patchstack
added 2025/12/15 1:30 p.m.3 views

WordPress Watu Quiz plugin <= 3.4.5 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by daroo in WordPress Plugin Watu Quiz versions = 3.4.5...

6.5CVSS7AI score0.00038EPSS
Exploits0Affected Software1
Rows per page
Query Builder