Quiz Maker, CVE-2024-1079

CVE, Research URL: CVE-2024-1079
Home page URL: Security reports for Quiz Maker
Application: Quiz Maker
Published on: Feb 07, 2024
Research Description: The Quiz Maker plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the ays_show_results() function in all versions up to, and including, 6.5.2.4. This makes it possible for unauthenticated attackers to fetch arbitrary quiz results which can contain PII.
Affected versions: Min -, max 6.5.2.5.
Status: vulnerable