The Quiz Maker plugin for WordPress is susceptible to a Sensitive Information Exposure vulnerability in all releases up to 6.7.0.80. The flaw allows unauthenticated users to retrieve quiz answers via the ays_quiz_check_answer AJAX action, which only validates a nonce that is openly available to anyone visiting the site. Without proper authorization checks, an attacker can obtain the correct answers for any quiz question, compromising the confidentiality of test content and potentially giving undue advantage to malicious participants. The weakness is classified as CWE‑200. The impact is that any visitor can access protected quiz data without legitimate credentials, thereby exposing confidential or proprietary information.

This issue affects WordPress sites that have installed the ays‑pro Quiz Maker plugin, specifically versions 6.7.0.80 and earlier. Sites using the plugin via the official repository or downloading older releases are vulnerable. No specific WordPress core version is required; the flaw resides entirely within the plugin’s code.

The CVSS score of 5.3 indicates moderate severity. EPSS is listed as < 1%, suggesting a very low probability of exploitation at present. The vulnerability is not featured in the CISA KEV catalog. The attack surface is broad because any site visitor can discover the nonce and then call the AJAX action, meaning a threat actor only needs simple automated requests to harvest quiz answers. While the exploitation requires no privileged access, the data leakage can have significant consequences for educational or assessment platforms that rely on quiz integrity.