Known vulnerabilities in Watu Quiz

Creates exams, surveys, and quizzes with unlimited number of questions and answers. Mobile/touch - friendly.

11Reported vulnerabilities

7.2Highest CVSS score

3.4.8Latest version

3,000+Active installs

What to do now

Update Watu Quiz to 3.4.5.1 or later. 11 of these have a fixed version available. Updating resolves them.

Plugin last updated: August 4, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVE	Severity	Exploit probability next 30 days	Affected versions	Fixed in	Published
CVE-2025-11238	High 7.2	0.2%	0 to 3.4.4 (inclusive)	`3.4.5`	October 25, 2025
WF-aed2ec57-2475-4e77-8219-399cf769ba5a	High 7.1	—	3.1.2.1 to 3.1.2.5 (inclusive)	`3.1.2.6`	June 28, 2019
WF-efdf76b2-7640-4384-a72b-789159eb9c86	High 7.2	—	2.5.0.1 and earlier	`2.5.0.2`	November 16, 2014
CVE-2024-53792	Medium 6.5	0.5%	3.4.1.2 and earlier	`3.4.1.3`	November 29, 2024
CVE-2023-0968	Medium 6.1	1.3%	3.3.9 and earlier	`3.3.9.1`	March 3, 2023
CVE-2025-30844	Medium 6.1	0.4%	3.4.2 and earlier	`3.4.3`	April 1, 2025
CVE-2023-30483	Medium 6.1	0.4%	3.3.9.2 and earlier	`3.3.9.3`	April 13, 2023
CVE-2025-46242	Medium 4.9	0.3%	3.4.3 and earlier	`3.4.4`	April 22, 2025
CVE-2023-25022	Medium 4.4	0.4%	3.3.8 and earlier	`3.3.8.1`	February 3, 2023
CVE-2025-68587	Medium 4.3	0.2%	3.4.5 and earlier	`3.4.5.1`	December 17, 2025
CVE-2025-67976	Medium 4.3	0.3%	3.4.5 and earlier	`3.4.5.1`	December 15, 2025

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.