CVE-2022-42883: WordPress Quiz And Survey Master plugin <= 7.3.10 - Sensitive Information Disclosure vulnerability - Patchstack

Verified

Fixed

5.3

CVSS 3.1 score Medium severity

Report

Monitoring Not reported to be exploited

Vulnerable versions

<= 7.3.10

PSID

b55efae9a243

Classification

Sensitive Data Exposure

OWASP Top 10

A3: Sensitive Data Exposure

Required privilege

Can be exploited remotely without any authentication.

Publicly disclosed

2022-10-21

Details

Sensitive Information Disclosure vulnerability was discovered by Thura Moe Myint (Patchstack Alliance) in the WordPress Quiz And Survey Master plugin (versions <= 7.3.10).

Solution

Update the WordPress Quiz And Survey Master plugin to the latest available version (at least 7.3.11).

References