CVE-2025-3880

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-3880", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "state": "PUBLISHED", "assignerShortName": "Wordfence", "dateReserved": "2025-04-22T19:41:16.892Z", "datePublished": "2025-06-17T11:23:36.813Z", "dateUpdated": "2026-04-08T17:18:16.170Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-04-08T17:18:16.170Z"}, "affected": [{"vendor": "assafp", "product": "Quiz, Poll & Survey Maker by Opinion Stage", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "19.9.0", "versionType": "semver"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "The Poll, Survey & Quiz Maker Plugin by Opinion Stage plugin for WordPress is vulnerable to unauthorized modification of data due to a misconfigured capability check on several functions in all versions up to, and including, 19.9.0. This makes it possible for authenticated attackers, with Contributor-level access and above, to change the email address for the account connection, and disconnect the plugin. Previously created content will still be displayed and functional if the account is disconnected."}], "title": "Poll, Survey & Quiz Maker Plugin by Opinion Stage <= 19.9.0 - Incorrect Authorization to Authenticated (Contributor+) Plugin Settings Update", "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/ba86268a-7bd6-40ed-9af6-29409245675d?source=cve"}, {"url": "https://plugins.trac.wordpress.org/browser/social-polls-by-opinionstage/trunk/plugin.php"}, {"url": "https://plugins.trac.wordpress.org/browser/social-polls-by-opinionstage/trunk/src/Modules/Admin.php"}, {"url": "https://plugins.trac.wordpress.org/changeset/3310848/"}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-863 Incorrect Authorization", "cweId": "CWE-863", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "baseScore": 4.3, "baseSeverity": "MEDIUM"}}], "credits": [{"lang": "en", "type": "finder", "value": "Amin Beheshti"}], "timeline": [{"time": "2025-06-16T00:00:00.000Z", "lang": "en", "value": "Disclosed"}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-06-17T14:01:37.438964Z", "id": "CVE-2025-3880", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-06-17T14:10:35.433Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-3880", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-06-17T14:01:37.438964Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-06-17T14:03:44.256Z"}}], "cna": {"title": "Poll, Survey & Quiz Maker Plugin by Opinion Stage <= 19.9.0 - Incorrect Authorization to Authenticated (Contributor+) Plugin Settings Update", "credits": [{"lang": "en", "type": "finder", "value": "Amin Beheshti"}], "metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 4.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N"}}], "affected": [{"vendor": "assafp", "product": "Quiz, Poll & Survey Maker by Opinion Stage", "versions": [{"status": "affected", "version": "0", "versionType": "semver", "lessThanOrEqual": "19.9.0"}], "defaultStatus": "unaffected"}], "timeline": [{"lang": "en", "time": "2025-06-16T00:00:00.000Z", "value": "Disclosed"}], "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/ba86268a-7bd6-40ed-9af6-29409245675d?source=cve"}, {"url": "https://plugins.trac.wordpress.org/browser/social-polls-by-opinionstage/trunk/plugin.php"}, {"url": "https://plugins.trac.wordpress.org/browser/social-polls-by-opinionstage/trunk/src/Modules/Admin.php"}, {"url": "https://plugins.trac.wordpress.org/changeset/3310848/"}], "descriptions": [{"lang": "en", "value": "The Poll, Survey & Quiz Maker Plugin by Opinion Stage plugin for WordPress is vulnerable to unauthorized modification of data due to a misconfigured capability check on several functions in all versions up to, and including, 19.9.0. This makes it possible for authenticated attackers, with Contributor-level access and above, to change the email address for the account connection, and disconnect the plugin. Previously created content will still be displayed and functional if the account is disconnected."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-863", "description": "CWE-863 Incorrect Authorization"}]}], "providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-04-08T17:18:16.170Z"}}}, "cveMetadata": {"cveId": "CVE-2025-3880", "state": "PUBLISHED", "dateUpdated": "2026-04-08T17:18:16.170Z", "dateReserved": "2025-04-22T19:41:16.892Z", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "datePublished": "2025-06-17T11:23:36.813Z", "assignerShortName": "Wordfence"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Quiz, Poll & Survey Maker by Opinion Stage", "vendor": "assafp", "versions": [{"lessThanOrEqual": "19.9.0", "status": "affected", "version": "0", "versionType": "semver"}]}], "source": "security@wordfence.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:opinionstage:poll\\,_survey_\\&_quiz_maker:*:*:*:*:*:wordpress:*:*", "matchCriteriaId": "9BF9E23F-B5EA-48F9-BDBB-9BE3595C208C", "versionEndExcluding": "19.10.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The Poll, Survey & Quiz Maker Plugin by Opinion Stage plugin for WordPress is vulnerable to unauthorized modification of data due to a misconfigured capability check on several functions in all versions up to, and including, 19.9.0. This makes it possible for authenticated attackers, with Contributor-level access and above, to change the email address for the account connection, and disconnect the plugin. Previously created content will still be displayed and functional if the account is disconnected."}, {"lang": "es", "value": "El complemento Poll, Survey &amp; Quiz Maker Plugin by Opinion Stage para WordPress es vulnerable a la modificaci\u00f3n no autorizada de datos debido a una comprobaci\u00f3n de capacidad mal configurada en varias funciones en todas las versiones hasta la 19.9.0 incluida. Esto permite que atacantes autenticados, con acceso de Colaborador o superior, cambien la direcci\u00f3n de correo electr\u00f3nico de la cuenta y desconecten el complemento. El contenido creado previamente se seguir\u00e1 mostrando y funcionando si la cuenta se desconecta."}], "id": "CVE-2025-3880", "lastModified": "2026-06-17T09:20:51.180", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 1.4, "source": "security@wordfence.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-3880", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2025-06-17T14:01:37.438964Z", "version": "2.0.3"}}]}, "published": "2025-06-17T12:15:25.870", "references": [{"source": "security@wordfence.com", "tags": ["Product"], "url": "https://plugins.trac.wordpress.org/browser/social-polls-by-opinionstage/trunk/plugin.php"}, {"source": "security@wordfence.com", "tags": ["Product"], "url": "https://plugins.trac.wordpress.org/browser/social-polls-by-opinionstage/trunk/src/Modules/Admin.php"}, {"source": "security@wordfence.com", "tags": ["Patch"], "url": "https://plugins.trac.wordpress.org/changeset/3310848/"}, {"source": "security@wordfence.com", "tags": ["Third Party Advisory"], "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/ba86268a-7bd6-40ed-9af6-29409245675d?source=cve"}], "sourceIdentifier": "security@wordfence.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-863"}], "source": "security@wordfence.com", "type": "Secondary"}]}

{}

{"analysis": {"en": {"generated_at": "2026-04-22T01:18:35.281277+00:00", "value": {"mitigation_remediation": ["Upgrade the WordPress plugin to the latest version to eliminate the capability check flaw.", "If an upgrade cannot be performed immediately, reduce or remove Contributor\u2011level permissions from users who need not manage plugin settings, and consider disabling the plugin\u2019s settings interface for remaining roles.", "Inspect the plugin configuration to confirm that the account connection e\u2011mail remains correct and that the plugin has not been inadvertently disconnected."], "summary": {"action": "Update Plugin", "impact": "Privilege Escalation to Modify Plugin Settings"}, "threat_synthesis": {"affected_systems": "The vulnerability affects the WordPress plugin Poll, Survey & Quiz Maker by Opinion Stage (also sold as Quiz, Poll & Survey Maker by Opinion Stage). All releases up through version 19.9.0 are affected. Any WordPress site running this plugin within the specified version range is vulnerable.", "description_and_impact": "The Poll, Survey & Quiz Maker Plugin contains a misconfigured capability check that allows any authenticated user with Contributor or higher privileges to alter plugin settings. Such users can change the e\u2011mail address used for the account connection or disconnect the plugin entirely, causing previously created content to remain visible but potentially breaking the plugin\u2019s integration with external services. This represents an unauthorized modification of data, compromising the integrity of the plugin configuration and disrupting its intended functionality, and is classified as a CWE-863 vulnerability.", "risk_and_exploitability": "The CVSS score of 4.3 indicates a moderate severity. The EPSS score of less than 1% shows that exploitation is unlikely but not impossible. The vulnerability is not listed in the CISA KEV catalog, suggesting no large\u2011scale exploits have been observed. Attackers must first authenticate with Contributor-level or higher privileges, making this a local, authenticated threat rather than a remote exploitation vector."}}}}, "created": "2026-04-22T01:30:05.232115+00:00", "updated": "2026-04-22T01:30:05.232126+00:00", "vendors": []}