PT-2025-38864 · Unknown · Ays Pro Quiz Maker

Published 2025-09-22 · Updated 2025-09-22 · CVE-2025-58014

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Ays Pro Quiz Maker versions through 6.7.0.61

Description A Cross-Site Request Forgery (CSRF) issue exists in Ays Pro Quiz Maker, allowing attackers to perform actions on behalf of authenticated users. This can potentially lead to unauthorized actions within the application.

Recommendations Update Ays Pro Quiz Maker to a version later than 6.7.0.61.

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2025-58014

Affected Products

Ays Pro Quiz Maker

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-58014 · Security Note
• https://osv.dev/vulnerability/CVE-2025-58014 · Vendor Advisory
• https://patchstack.com/database/Wordpress/Plugin/quiz-maker/vulnerability/wordpress-quiz-maker-plugin-6-7-0-61-cross-site-request-forgery-csrf-vulnerability?_s_id=cve · Note
• https://twitter.com/CVEnew/status/1970255689961586924 · Twitter Post
• https://patchstack.com/database/wordpress/plugin/quiz-maker/vulnerability/wordpress-quiz-maker-plugin-6-7-0-61-cross-site-request-forgery-csrf-vulnerability?_s_id=cve · Note