CVE-2020-35951
CriticalIt allows users to delete arbitrary files such as wp-config.php file, which could effectively take a site offline and allow an attacker to reinstall with a WordPress instance under their control.
Published Jan 1, 2021 · Updated Nov 21, 2024 · Also known as 18458883-6cca-46d1-8437-4e646f4eafda
Key Facts
Patch immediately- CVE-2020-35951 is a critical-severity vulnerability (CVSS 9.9 v3.1) affecting Quiz And Survey Master (Expresstech), quiz-master-next (wordpress-plugin).
- It is not listed in any known-exploited vulnerabilities catalog. No public exploit code is known.
- EPSS estimates a 76% probability of exploitation in the next 30 days.
- Fixed versions are available, including Quiz And Survey Master 7.0.1, quiz-master-next 7.0.1.
- Brandefense priority: patch immediately, because it is very likely to be exploited soon.
CVSS v3.1
9.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:H
EPSS (30-day exploit likelihood)
76%
Higher than 99.5% of all scored CVEs
Exploited in the wild
No known
Not in a known-exploited catalog
Public exploit code
None known
Get the full CVE-2020-35951 brief as a PDF
Every affected product and fixed release, exploitation status and a first 24 hours response checklist, emailed within minutes.
Description
An issue was discovered in the Quiz and Survey Master plugin before 7.0.1 for WordPress. It allows users to delete arbitrary files such as wp-config.php file, which could effectively take a site offline and allow an attacker to reinstall with a WordPress instance under their control. This occurred via qsm_remove_file_fd_question, which allowed unauthenticated deletions (even though it was only intended for a person to delete their own quiz-answer files).
Affected Products
2 affected entries in total| Product | Affected versions | Fixed in |
|---|---|---|
| Quiz And Survey MasterExpresstech | See advisory | 7.0.1 |
| quiz-master-nextwordpress-plugin | See advisory | 7.0.1 |
Patched Releases
Quiz And Survey Master
7.0.1
quiz-master-next
7.0.1
Timeline
Publicly disclosed
Jan 1, 2021
Last updated
Nov 21, 2024
Weakness Type
- CWE-306 Missing Authentication for Critical Function
- CWE-639 Authorization Bypass Through User-Controlled Key
References
- advisoryhttps://www.wordfence.com/threat-intel/vulnerabilities/id/18458883-6cca-46d1-8437-4e646f4eafda?source=api-prod
- advisoryhttps://www.wordfence.com/threat-intel/vulnerabilities/id/18458883-6cca-46d1-8437-4e646f4eafda?source=api-scan
- exploithttps://wpscan.com/vulnerability/10348
- exploithttps://www.wordfence.com/blog/2020/08/critical-vulnerabilities-patched-in-quiz-and-survey-master-plugin/
FAQ
Common Questions.
An issue was discovered in the Quiz and Survey Master plugin before 7.0.1 for WordPress.
Affected: Quiz And Survey Master (Expresstech); quiz-master-next (wordpress-plugin). The full list is in the CVE brief.
It is not listed in any known-exploited vulnerabilities catalog.
No, it is not currently listed in the CISA Known Exploited Vulnerabilities catalog.
No public exploit code is known.
Fixed versions are available, including Quiz And Survey Master 7.0.1, quiz-master-next 7.0.1.
Brandefense priority: patch immediately, because it is very likely to be exploited soon.
Is CVE-2020-35951 Running On Your Attack Surface?
Brandefense maps vulnerabilities like this one to your internet-facing assets and tells you exactly where to patch.
Request A Demo