Unauthorized Access

Quiz and Survey Master Unauthorized Access and Data Modification Vulnerability (CVE-2025-9637) — Medium Severity

A significant security flaw has been found in the Quiz and Survey Master (QSM) plugin for WordPress. This vulnerability, identified as CVE-2025-9637, could allow malicious actors to gain unauthorized access to private quiz information and even upload files without proper…

Alex Joseph
January 9, 2026

Nextcloud Approval App Unauthorized Workflow Manipulation Vulnerability (CVE-2025-66515) — Low Severity

Overview A security flaw has been identified in the Nextcloud Approval app that could allow a specific type of unauthorized action. This vulnerability means that an authenticated user who is already a “requester” in a workflow could potentially set another…

Alex Joseph
December 11, 2025