Quiz Maker < 6.5.1.2 - Missing Authorization

2024-01-1200:00:00

wpscan.com

wordpress

quiz maker

vulnerability

missing authorization

unauthorized access

capability check

authenticated attackers

subscriber-level access

AI Score

6.2

Confidence

High

EPSS

Percentile

9.6%

JSON

Description The Quiz Maker plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in versions up to, and including, 6.5.1.1. This makes it possible for authenticated attackers, with subscriber-level access and above, to perform unauthorized actions.