vulnerable to unauthorized access

Hi bjpbkk,
this was already reported last week and is being worked on.

Just note that this was reported as “Low priority – No impactful threat”, so there is nothing you need to worry about in the meantime. No secure data or information is leaked at all, and the vulnerability cannot be used to gain further access. The only thing an attacker can gain from this is the question HTML – which they can also get by just viewing the actual quiz.

Still, it is unintended access nonetheless, and has already been patched – just awaiting approval before publishing.

Here is the official patchstack report so that you don’t have to take my word on it 🙂

https://patchstack.com/database/wordpress/plugin/hd-quiz/vulnerability/wordpress-hd-quiz-plugin-2-0-9-broken-access-control-vulnerability