Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2023-6155

Quiz Maker < 6.4.9.5 - Unauthenticated Email Address Disclosure

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
WPScan

Description

The Quiz Maker WordPress plugin before 6.4.9.5 does not adequately authorize the `ays_quiz_author_user_search` AJAX action, allowing an unauthenticated attacker to perform a search for users of the system, ultimately leaking user email addresses.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown Quiz Maker

Default version status: unaffected

  • 0 to < 6.4.9.5affected

References