CVE-2026-14826

The Quiz and Survey Master plugin for WordPress versions prior to 11.2.4 is vulnerable due to a lack of per-object ownership checks on REST routes, enabling users with contributor-level access and higher to access sensitive configuration details, including email notification recipient addresses, of quizzes created by other users. This exposure could lead to unauthorized information disclosure, potentially affecting user privacy and data integrity. WordPress site administrators using this plugin should prioritize updating to the latest version to mitigate this risk.