CVE-2024-1079 in Quiz Maker Plugin情報

要約

〜によって MITRE • 2024年02月07日

The Quiz Maker plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the ays_show_results() function in all versions up to, and including, 6.5.2.4. This makes it possible for unauthenticated attackers to fetch arbitrary quiz results which can contain PII.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

責任者

Wordfence

予約する

2024年01月30日

公開

2024年02月07日

モデレーション

承諾済み

エントリ

VDB-253090

CPE

準備完了

CWE

CWE-862 (確認済み)

CVSS

5.3 (NVD)

EPSS

0.00549

KEV

いいえ

アクティビティ

非常低い

セクター

Hostingprovider

ソース

MITRE	https://www.cve.org/CVERecord?id=CVE-2024-1079
NVD	https://nvd.nist.gov/vuln/detail/CVE-2024-1079
CVE Details	https://www.cvedetails.com/cve/CVE-2024-1079/

◂ 前概要次 ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!