PT-2026-1747 · WordPress · Quiz Maker

Bakir Tučić · Publicado 2026-01-12 · Atualizado 2026-01-12 · CVE-2025-14579

Positive Technologies (AI Summary)

CVSS v3.1

4.8

Média

Vetor base

AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions The Quiz Maker WordPress plugin versions prior to 6.7.0.89

Description The software does not properly sanitize and escape certain settings, potentially allowing users with high privileges, such as administrators, to carry out Stored Cross-Site Scripting (XSS) attacks. This is possible even when the unfiltered html capability is not permitted, for example, in a multisite configuration. XSS attacks involve injecting malicious scripts into websites viewed by other users.

Recommendations Update to version 6.7.0.89 or later.

Exploit

Correção

Identificadores relacionados

CVE-2025-14579

Produtos afetados

Quiz Maker

Referências · 4

• 🔥 https://wpscan.com/vulnerability/1ff8ea2b-6513-4d5c-b7ea-9ab39c9ea9c6 · Exploit
• https://t.me/cveNotify/148389 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2025-14579 · Nota de Segurança
• https://t.me/CVEtracker/41976 · Publicação no Telegram