Unknown Quiz Maker vulnerabilities

5 vulnerabilities

Known vulnerabilities in Unknown Quiz Maker, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

4.8CVE-2025-14579unknownquiz maker+1
EPSS score
0.21%
The Quiz Maker WordPress plugin before 6.7.0.89 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).4.8CVE-2024-8617ays-proquiz_maker+2
EPSS score
0.33%
The Quiz Maker WordPress plugin before 6.5.9.9 does not sanitize and escape some of its settings, which could allow high-privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)6.1CVE-2023-2571ays-proquiz_maker+2
EPSS score
2.14%
The Quiz Maker WordPress plugin before 6.4.2.7 does not escape some parameters before outputting them back in attributes, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin5.3CVE-2023-6155ays-proquiz_maker+2
EPSS score
0.56%
The Quiz Maker WordPress plugin before 6.4.9.5 does not adequately authorize the `ays_quiz_author_user_search` AJAX action, allowing an unauthenticated attacker to perform a search for users of the system, ultimately leaking user email addresses.6.1CVE-2023-6166ays-proquiz_maker+2
EPSS score
0.42%
The Quiz Maker WordPress plugin before 6.4.9.5 does not escape generated URLs before outputting them in attributes, leading to Reflected Cross-Site Scripting