https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T10:51:19.152632+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-282328 EUVD-2026-282328 2026-10-08T10:51:19.200246+00:00 EUVD-2026-282328 https://cve.radiocsirt.org/vuln/fkie_cve-2025-10493 fkie_cve-2025-10493 2026-10-08T10:51:19.200282+00:00

The Chained Quiz plugin for WordPress is vulnerable to Insecure Direct Object Reference in version 1.3.4 and below via the quiz submission and completion mechanisms due to missing validation on a user controlled key. This makes it possible for unauthenticated attackers to hijack and modify other users' quiz attempts by manipulating the chained_completion_id cookie value, allowing them to alter quiz answers, scores, and results of any user. The vulnerability was partially patched in versions 1.3.4 and 1.3.5.

 https://cve.radiocsirt.org/vuln/ghsa-5v4m-g3m7-229m GHSA-5v4m-g3m7-229m 2026-10-08T10:51:19.200318+00:00

The Chained Quiz plugin for WordPress is vulnerable to Insecure Direct Object Reference in version 1.3.4 and below via the quiz submission and completion mechanisms due to missing validation on a user controlled key. This makes it possible for unauthenticated attackers to hijack and modify other users' quiz attempts by manipulating the chained_completion_id cookie value, allowing them to alter quiz answers, scores, and results of any user. The vulnerability was partially patched in versions 1.3.4 and 1.3.5.