PT-2026-1747 · WordPress · Quiz Maker

Bakir Tučić · Published 2026-01-12 · Updated 2026-01-12 · CVE-2025-14579

Positive Technologies (AI Summary)

CVSS v3.1

4.8

Medium

Base vector

AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions The Quiz Maker WordPress plugin versions prior to 6.7.0.89

Description The software does not properly sanitize and escape certain settings, potentially allowing users with high privileges, such as administrators, to carry out Stored Cross-Site Scripting (XSS) attacks. This is possible even when the unfiltered html capability is not permitted, for example, in a multisite configuration. XSS attacks involve injecting malicious scripts into websites viewed by other users.

Recommendations Update to version 6.7.0.89 or later.

Exploit

Fix

Related Identifiers

CVE-2025-14579

Affected Products

Quiz Maker

References · 4

• 🔥 https://wpscan.com/vulnerability/1ff8ea2b-6513-4d5c-b7ea-9ab39c9ea9c6 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-14579 · Security Note
• https://t.me/cveNotify/148389 · Telegram Post
• https://t.me/CVEtracker/41976 · Telegram Post