Access Control Weakness in Poll, Survey & Quiz Maker by Opinion Stage

CVE-2025-68594

What is CVE-2025-68594?

A missing authorization vulnerability exists in the Poll, Survey & Quiz Maker Plugin developed by Opinion Stage. This security flaw arises from incorrectly configured access control security levels, allowing unauthorized users to exploit specific functionalities. As a result, sensitive data may be exposed or manipulated, compromising the integrity of user content and interactions. Users running versions of the plugin from n/a to 19.12.1 are particularly at risk. It is crucial for administrators to assess their installations and apply necessary updates to mitigate potential threats.

References