Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 05:36:17 +0000 CVE-2026-14825 — Quiz And Survey Master < 11.2.4 - Contributor+ Arbitrary Quiz Text Settings Update via IDOR https://vulnerability.circl.lu/vuln/cve-2026-14825 <p><strong>Affected:</strong> Unknown Quiz and Survey Master (QSM)</p> <p>The Quiz and Survey Master (QSM) WordPress plugin before 11.2.4 does not perform a per-object ownership check before saving a quiz&#39;s front-end text settings, allowing users with contributor-level access and above to modify the text settings of quizzes created by other users.</p> <p><strong>Affected:</strong> Unknown Quiz and Survey Master (QSM)</p> <p>The Quiz and Survey Master (QSM) WordPress plugin before 11.2.4 does not perform a per-object ownership check before saving a quiz&#39;s front-end text settings, allowing users with contributor-level access and above to modify the text settings of quizzes created by other users.</p> https://vulnerability.circl.lu/vuln/cve-2026-14825