Cross-Site Request Forgery Vulnerability in Ultimate Viral Quiz Plugin for WordPress

CVE-2025-10302

What is CVE-2025-10302?

The Ultimate Viral Quiz plugin for WordPress is susceptible to Cross-Site Request Forgery due to inadequate nonce validation in the save_options() function. This vulnerability allows unauthenticated attackers to manipulate the plugin's settings by tricking a site administrator into executing a malicious action, such as clicking on a compromised link. All versions up to and including 1.0 are affected, highlighting the importance of maintaining robust security measures to protect against unauthorized changes.

References