| Package | Affected versions | Patched versions |
|---|---|---|
| quiz maker | < 6.4.9.5 | 6.4.9.5 |
The Quiz Maker WordPress plugin before 6.4.9.5 does not adequately authorize the `ays_quiz_author_user_search` AJAX action, allowing an unauthenticated attacker to perform a search for users of the system, ultimately leaking user email addresses.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free