CVE-2023-6155
EUVD-2023-5840526.12.2023, 19:15
The Quiz Maker WordPress plugin before 6.4.9.5 does not adequately authorize the `ays_quiz_author_user_search` AJAX action, allowing an unauthenticated attacker to perform a search for users of the system, ultimately leaking user email addresses.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| ays-pro | quiz_maker | 𝑥 < 6.4.9.5 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration