Local File Inclusion Vulnerability in Opinion Stage's Poll, Survey & Quiz Maker Plugin
CVE-2025-53328

7.5HIGH

Key Information:

Vendor

WordPress
Status
Poll, Survey & Quiz Maker Plugin By Opinion Stage
Vendor
CVE Published:
28 August 2025

What is CVE-2025-53328?

The Poll, Survey & Quiz Maker Plugin by Opinion Stage contains a vulnerability that allows attackers to exploit improper control of filename parameters in PHP include statements. This flaw can lead to Local File Inclusion, which may enable unauthorized access to sensitive files on the server. Websites using affected versions of the plugin are at risk of being compromised, allowing attackers to execute arbitrary PHP code or access confidential data. It is critical for users to update to the latest version and patch this vulnerability to safeguard their web applications.

Affected Version(s)

Poll, Survey & Quiz Maker Plugin by Opinion Stage <= 19.11.0

References

https://patchstack.com/database/wordpress/plugin/social-p...
vdb-entry

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Ananda Dhakal (Patchstack)
.