SEPTEMBER 15, 2026
Live Feed
Back to database
Case File

CVE-2026-14825

LOW · CVSS 2.7 EPSS 0.21%

Source: NVD + CISA KEV + EPSS · Published 2026-08-19 · Last synced 2026-09-15

CyberRota Analysis

AI-Generated

The Quiz and Survey Master plugin for WordPress prior to version 11.2.4 is vulnerable due to a lack of per-object ownership checks, enabling users with contributor-level access and higher to alter the front-end text settings of quizzes created by other users. This could lead to unauthorized modifications and potential misinformation in quizzes, impacting the integrity of content. WordPress site administrators using this plugin should prioritize updating to the latest version to mitigate this risk.

CVE
CVE-2026-14825
Severity
LOW
CVSS
2.7
EPSS
0.21%
WordPress

Original NVD Description

The Quiz and Survey Master (QSM) WordPress plugin before 11.2.4 does not perform a per-object ownership check before saving a quiz's front-end text settings, allowing users with contributor-level access and above to modify the text settings of quizzes created by other users.