CVE-2025-67976

MediumCVSS 6.5

Published: 16/12/2025(UTC)Updated: 05/10/2026(UTC)Translated: 01/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.29%

20th percentile - higher than 20% of all known CVEs

Summary

The Watu Quiz plugin contains a missing authorization vulnerability that allows exploiting incorrectly configured access control security levels. This issue affects Watu Quiz from n/a through <= 3.4.5.

Risk Assessment

The risk is the possibility of unauthorized access to plugin functionality, which could lead to data integrity issues or unauthorized configuration changes.

Recommendation

It is recommended to update the Watu Quiz plugin to the latest available version that contains the fix. Also review access control configuration.

Other vulnerabilities in Watu Quiz

CVE-2025-68587Medium
The Watu Quiz plugin for WordPress has a missing authorization vulnerability that allows exploitation of incorrectly configured access control security levels. This issue affects versions from n/a through 3.4.5.

Original NVD description (English source)

Missing Authorization vulnerability in Bob Watu Quiz watu allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Watu Quiz: from n/a through <= 3.4.5.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS