CVE-2026-125787: WordPress Quiz And Survey Master plugin <= 11.3.0 - Broken Access Control vulnerability
Missing Authorization vulnerability in ExpressTech Quiz And Survey Master quiz-master-next allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Quiz And Survey Master: from n/a through 11.3.0.
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress Quiz And Survey Master pluginto a version that resolves this vulnerability.Fixed in 11.3.1
Event History
Frequently Asked Questions
Which installations are affected?
Quiz And Survey Master installations using versions through 11.3.0 are affected. The available data does not identify a fixed version.
What level of access does an attacker need?
The CVSS vector indicates that an attacker needs low-level privileges and can exploit the issue remotely without user interaction. The issue is an authorization flaw involving incorrectly configured access-control levels.
What is the likely impact of successful exploitation?
Successful exploitation may allow limited unauthorized disclosure and modification of data. The provided severity data indicates no availability impact.