WordPress CVEs

Description

The Chained Quiz plugin for WordPress is vulnerable to Insecure Direct Object Reference in version 1.3.4 and below via the quiz submission and completion mechanisms due to missing validation on a user controlled key. This makes it possible for unauthenticated attackers to hijack and modify other users' quiz attempts by manipulating the chained_completion_id cookie value, allowing them to alter quiz answers, scores, and results of any user. The vulnerability was partially patched in versions 1.3.4 and 1.3.5.

Affected WordPress components

• Chained Quiz Plugin · chained-quiz
  Confirmed match Active
  Up to and including 1.3.5
  View on WordPress.org

A confirmed match is backed by the plugin or theme slug. A possible match is based on the product name only and should be verified.

Affected products and versions

• prasunsen Chained Quiz — Up to and including 1.3.5

References

• plugins.trac.wordpress.org https://plugins.trac.wordpress.org/browser/chained-quiz/tags/1.3.3/controllers/quizzes.php
• plugins.trac.wordpress.org https://plugins.trac.wordpress.org/browser/chained-quiz/tags/1.3.3/models/quiz.php
• plugins.trac.wordpress.org https://plugins.trac.wordpress.org/changeset/3362561/
• plugins.trac.wordpress.org https://plugins.trac.wordpress.org/changeset/3362701/
• plugins.trac.wordpress.org https://plugins.trac.wordpress.org/changeset/3362966/
• www.wordfence.com https://www.wordfence.com/threat-intel/vulnerabilities/id/1d8f6965-1fe3-4f24-bd6b-9026e91bc5db?source=cve
• nvd.nist.gov Official NVD record