Description
WordPress Plugin SS Quiz is prone to a cross-site request forgery vulnerability and a security bypass vulnerability. An attacker can exploit these issues to perform unauthorized actions in the context of a user's active session or to bypass security restrictions and gain unauthorized access to the application; other attacks are also possible. WordPress Plugin SS Quiz version 1.11 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 1.12 or latest
References
Related Vulnerabilities
WordPress Plugin EELV Newsletter Cross-Site Scripting (3.3.0)
WordPress Plugin Word of the day Arbitrary File Upload (1.0)
phpMyAdmin Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-9855)
WordPress Plugin FormCraft-Premium WordPress Form Builder Cross-Site Scripting (3.2.31)
WordPress Ultimate Member Plugin CVE-2020-36170 Vulnerability (CVE-2020-36170)