Quiz And Survey Master < 8.1.17 - Unauthenticated Unauthorised Action

2024-01-0500:00:00

wpscan.com

plugin

unauthorized access

data loss

AI Score

7.1

Confidence

High

EPSS

0.001

Percentile

17.6%

JSON

Description The plugin is vulnerable to unauthorized access, modification or loss of data due to a missing capability check on one of its functions allowing unauthenticated attackers to invoke this function.

References

patchstack.com/database/vulnerability/quiz-master-next/wordpress-quiz-and-survey-master-plugin-8-1-16-broken-access-control-vulnerability