CVE-2025-49401: WordPress smart SEO Plugin <= 4.0 - Privilege Escalation Vulnerability
Deserialization of Untrusted Data vulnerability in ExpressTech Systems Quiz And Survey Master allows Object Injection. This issue affects Quiz And Survey Master: from n/a through 10.2.5.
Other sources
Incorrect Privilege Assignment vulnerability in axiomthemes smart SEO smartSEO allows Privilege Escalation.This issue affects smart SEO: from n/a through <= 4.0.
— MITRE
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-49401?
CVE-2025-49401 is classified as a moderate severity vulnerability due to its potential to allow object injection.
How do I fix CVE-2025-49401?
To fix CVE-2025-49401, update the Quiz And Survey Master software to version 10.2.6 or later.
What systems are affected by CVE-2025-49401?
CVE-2025-49401 affects ExpressTech Systems Quiz And Survey Master up to version 10.2.5 and WordPress Quiz And Survey Master Plugin up to version 10.2.5.
What type of vulnerability is CVE-2025-49401?
CVE-2025-49401 is a deserialization of untrusted data vulnerability that allows for object injection.
Is there a known exploit for CVE-2025-49401?
While there is no publicly disclosed exploit for CVE-2025-49401, the potential for exploitation exists due to the nature of the vulnerability.