CVE-2023-0291

The Quiz And Survey Master for WordPress is vulnerable to authorization bypass due to a missing capability check on the function associated with the qsm_remove_file_fd_question AJAX action in versions up to, and including, 8.0.8. This makes it possible for unauthenticated attackers to delete arbitrary media files.

• CWE-862

• https://packetstormsecurity.com/files/171011/wpqsm808-xsrf.txtNot Applicable, VDB Entry
• https://plugins.trac.wordpress.org/changeset/2834471/quiz-master-nextPatch
• https://wordpress.org/plugins/quiz-master-next/Product
• https://www.wordfence.com/threat-intel/vulnerabilities/id/68110321-db1a-4634-98cd-0afd3ec933b8?source=cveThird Party Advisory
• https://packetstormsecurity.com/files/171011/wpqsm808-xsrf.txtNot Applicable, VDB Entry
• https://plugins.trac.wordpress.org/changeset/2834471/quiz-master-nextPatch
• https://wordpress.org/plugins/quiz-master-next/Product
• https://www.wordfence.com/threat-intel/vulnerabilities/id/68110321-db1a-4634-98cd-0afd3ec933b8?source=cveThird Party Advisory

Published

Jun 9, 2023

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-0285The Real Media Library WordPress plugin before 4.18.29 does …5.4
• CVE-2023-0286There is a type confusion vulnerability relating to X.400 ad…7.4
• CVE-2023-0287A vulnerability was found in ityouknow favorites-web. It has…5.4
• CVE-2023-0288Heap-based Buffer Overflow in GitHub repository vim/vim prio…7.8
• CVE-2023-0289Cross-site Scripting (XSS) - Stored in GitHub repository cra…5.4
• CVE-2023-0290Rapid7 Velociraptor did not properly sanitize the client ID …4.3
• CVE-2023-0292The Quiz And Survey Master plugin for WordPress is vulnerabl…8.1
• CVE-2023-0293The Mediamatic – Media Library Folders plugin for WordPress …4.3
• CVE-2023-0294The Mediamatic – Media Library Folders plugin for WordPress …4.3
• CVE-2023-0295The Launchpad plugin for WordPress is vulnerable to Stored C…4.8
• CVE-2023-0296The Birthday attack against 64-bit block ciphers flaw (CVE-2…5.3
• CVE-2023-0297Code Injection in GitHub repository pyload/pyload prior to 0…9.8