CVE-2020-36504CWE-352

WP-Pro-Quiz <= 0.37 - Arbitrary Quiz Deletion via CSRF

published November 1, 2021

CVSS
—
EPSS
1%
Percentile
51.3
In the wild
Unconfirmed
What it is

The WP-Pro-Quiz WordPress plugin through 0.37 does not have CSRF check in place when deleting a quiz, which could allow an attacker to make a logged in admin delete arbitrary quiz on the blog

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00669 · 51.3th percentile
Weakness
CWE-352 · Cross-Site Request Forgery (CSRF)
Published
2021-11-01T08:45Z
EPSS history
Timeline
  • 01 NOV 08:45Z
    WP-Pro-Quiz <= 0.37 - Arbitrary Quiz Deletion via CSRF
    cvelistv5