CVE-2025-68587

MediumCVSS 4.3

Published: 24/12/2025(UTC)Updated: 07/10/2026(UTC)Translated: 07/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.22%

11th percentile - higher than 11% of all known CVEs

Summary

The Watu Quiz plugin for WordPress has a missing authorization vulnerability that allows exploitation of incorrectly configured access control security levels. This issue affects versions from n/a through 3.4.5.

Risk Assessment

An attacker could gain access to functions or data they are not authorized to use, potentially leading to unauthorized changes to quizzes or data leakage.

Recommendation

Update the Watu Quiz plugin to the latest version available from the vendor that fixes this vulnerability.

Other vulnerabilities in Watu Quiz

CVE-2025-67976Medium
The Watu Quiz plugin contains a missing authorization vulnerability that allows exploiting incorrectly configured access control security levels. This issue affects Watu Quiz from n/a through <= 3.4.5.

Original NVD description (English source)

Missing Authorization vulnerability in Bob Watu Quiz watu allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Watu Quiz: from n/a through <= 3.4.5.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS