CVE-2025-63054: WordPress Quiz And Survey Master plugin <= 10.3.2 - Broken Access Control vulnerability
Missing Authorization vulnerability in ExpressTech Systems Quiz And Survey Master quiz-master-next allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Quiz And Survey Master: from n/a through <= 10.3.2.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-63054?
CVE-2025-63054 has a critical severity due to the missing authorization vulnerability that allows exploitation of improperly configured access control security levels.
How do I fix CVE-2025-63054?
To fix CVE-2025-63054, update the Quiz And Survey Master plugin to a version higher than 10.3.1 where the vulnerability has been addressed.
Who is affected by CVE-2025-63054?
CVE-2025-63054 affects users of Quiz And Survey Master from n/a through version 10.3.1 on both ExpressTech Systems and WordPress platforms.
What type of vulnerability is CVE-2025-63054?
CVE-2025-63054 is classified as a Missing Authorization vulnerability involving broken access control.
Can CVE-2025-63054 lead to data exposure?
Yes, CVE-2025-63054 can potentially lead to unauthorized access to sensitive data due to its exploitation.