CVE-2025-55708: WordPress Quiz And Survey Master Plugin <= 10.2.4 - SQL Injection Vulnerability
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ExpressTech Systems Quiz And Survey Master allows SQL Injection. This issue affects Quiz And Survey Master: from n/a through 10.2.4.
Other sources
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ExpressTech Systems Quiz And Survey Master quiz-master-next allows SQL Injection.This issue affects Quiz And Survey Master: from n/a through <= 10.2.4.
— MITRE
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-55708?
CVE-2025-55708 is classified as a critical SQL Injection vulnerability.
How do I fix CVE-2025-55708?
To fix CVE-2025-55708, update the Quiz And Survey Master plugin to the latest version beyond 10.2.4.
What versions are affected by CVE-2025-55708?
CVE-2025-55708 affects Quiz And Survey Master versions up to and including 10.2.4.
What type of vulnerability is CVE-2025-55708?
CVE-2025-55708 is an SQL Injection vulnerability caused by improper neutralization of special elements in SQL commands.
Who is impacted by CVE-2025-55708?
Users of the Quiz And Survey Master plugin in WordPress are impacted by CVE-2025-55708.