CVE-2025-6790

MEDIUM

4.3

Description

The Quiz and Survey Master (QSM) WordPress plugin before 10.2.3 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack.

CVE Details

CVSS v3.1 Score4.3

SeverityMEDIUM

CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Attack VectorNETWORK

ComplexityLOW

Privileges RequiredNONE

User InteractionREQUIRED

Published8/14/2025

Last Modified8/14/2025

Sourcenvd

Honeypot Sightings0

References

https://wpscan.com/vulnerability/af337f9f-c955-49eb-9675-2f85da96fcfe/(contact@wpscan.com)

https://wpscan.com/vulnerability/af337f9f-c955-49eb-9675-2f85da96fcfe/(134c704f-9b21-4f2e-91b3-4a467353bcc0)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.