← CVE Intelligence

CVE-2023-6155

Quiz Maker < 6.4.9.5 - Unauthenticated Email Address Disclosure PUBLISHED

Description (CNA)

The Quiz Maker WordPress plugin before 6.4.9.5 does not adequately authorize the `ays_quiz_author_user_search` AJAX action, allowing an unauthenticated attacker to perform a search for users of the system, ultimately leaking user email addresses.

Affected (CNA)

Vendor / productVersions
Unknown / Quiz Makeraffected 0 before 6.4.9.5

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.