The Quiz and Survey Master (QSM) WordPress plugin before 10.2.3 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Quiz Master Next Plugin | — | Update quiz-master-next plugin to version 10.2.3, or a newer patched version | Aug 26, 2025 | Jul 24, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub