Known vulnerabilities in ARI Stream Quiz – WordPress Quizzes Builder

Easy to use WordPress Viral Quiz Plugin. Create Trivia and Personality quizzes in BuzzFeed style and collect unlimited leads.

7Reported vulnerabilities

8.8Highest CVSS score

1.3.6Latest version

2,000+Active installs

What to do now

Update ARI Stream Quiz – WordPress Quizzes Builder to 1.3.1 or later. 7 of these have a fixed version available. Updating resolves them.

Plugin last updated: July 26, 2025 / Tested up to WordPress: 6.8.8 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVE	Severity	Exploit probability next 30 days	Affected versions	Fixed in	Published
CVE-2023-52182	High 8.8	0.6%	1.3.0 and earlier	`1.3.1`	December 31, 2023
WF-bdce01f2-7c79-4b1d-8da2-f6ce118856a1	Medium 6.1	—	1.2.26 and earlier	`1.2.27`	February 17, 2022
CVE-2023-47835	Medium 5.4	0.4%	1.2.32 and earlier	`1.3.0`	November 23, 2023
CVE-2023-51487	Medium 5.4	0.2%	1.2.32 and earlier	`1.3.0`	December 27, 2023
WF-b758c8a7-6220-4b54-af88-7933a530b5ba	Medium 4.3	—	1.2.32 and earlier	`1.3.0`	November 21, 2023
WF-b6c5f933-b71b-4475-abdf-4cffff2a1a6c	Medium 4.3	—	1.2.32 and earlier	`1.3.0`	November 14, 2023
CVE-2023-47513	Medium 4.3	0.4%	1.3.2 and earlier	`1.3.3`	November 7, 2023

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.