Multiple Insecure Direct Object References (IDOR) vulnerabilities in ExpressTech Quiz And Survey Master plugin <= 7.3.6 on WordPress.
References
| Link | Resource |
|---|---|
| https://patchstack.com/database/vulnerability/quiz-master-next/wordpress-quiz-and-survey-master-plugin-7-3-6-multiple-insecure-direct-object-references-idor-vulnerabilities?_s_id=cve | Third Party Advisory |
| https://wordpress.org/plugins/quiz-master-next/#developers | Product Release Notes Third Party Advisory |
Configurations
History
04 Nov 2022, 14:08
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Expresstech
Expresstech quiz And Survey Master |
|
| CWE | CWE-639 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.8 |
| References | (CONFIRM) https://wordpress.org/plugins/quiz-master-next/#developers - Product, Release Notes, Third Party Advisory | |
| References | (CONFIRM) https://patchstack.com/database/vulnerability/quiz-master-next/wordpress-quiz-and-survey-master-plugin-7-3-6-multiple-insecure-direct-object-references-idor-vulnerabilities?_s_id=cve - Third Party Advisory | |
| CPE | cpe:2.3:a:expresstech:quiz_and_survey_master:*:*:*:*:*:wordpress:*:* |
03 Nov 2022, 20:36
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-11-03 20:15
Updated : 2023-12-10 14:35
NVD link : CVE-2021-36906
Mitre link : CVE-2021-36906
CVE.ORG link : CVE-2021-36906
JSON object : View
Products Affected
expresstech
- quiz_and_survey_master
CWE
CWE-639
Authorization Bypass Through User-Controlled Key