{"id":64212,"date":"2026-06-19T08:31:15","date_gmt":"2026-06-19T08:31:15","guid":{"rendered":"https:\/\/zero.redgem.net\/?p=64212"},"modified":"2026-06-19T08:31:15","modified_gmt":"2026-06-19T08:31:15","slug":"pressprimer-quiz-230-insecure-direct-object-reference-to-authenticated-custom-arbitrary-modification","status":"publish","type":"post","link":"https:\/\/zero.redgem.net\/?p=64212","title":{"rendered":"PressPrimer Quiz <= 2.3.0 - Insecure Direct Object Reference to Authenticated (Custom+) Arbitrary Modification via 'quiz_id', 'item_id', and 'rule_id' Parameters_CVE-2026-10623"},"content":{"rendered":"

{“lastseen”:””,”description”:”The PressPrimer Quiz \u2013 AI Quiz Maker, Exam Builder \\u0026 LMS Assessment Plugin plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.3.0 via the ‘rule_id’ parameter due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with custom-level access and above, to modify or delete quiz rules belonging to other teachers, resulting in unauthorized tampering of another user’s quiz structure.”,”published”:”2026-06-18T05:34:24.522Z”,”modified”:”2026-06-18T18:18:48.769Z”,”type”:”cve”,”title”:”PressPrimer Quiz \\u003c= 2.3.0 – Insecure Direct Object Reference to Authenticated (Custom+) Arbitrary Modification via ‘quiz_id’, ‘item_id’, and ‘rule_id’ Parameters”,”source”:”Wordfence”,”references”:”https:\/\/www.wordfence.com\/threat-intel\/vulnerabilities\/id\/150ac796-d77b-4915-8bbf-9f9b54be8eaf?source=cve\\nhttps:\/\/plugins.trac.wordpress.org\/browser\/pressprimer-quiz\/tags\/2.2.2\/includes\/api\/class-ppq-rest-controller.php#L1923\\nhttps:\/\/plugins.trac.wordpress.org\/browser\/pressprimer-quiz\/tags\/2.2.2\/includes\/api\/class-ppq-rest-controller.php#L1963\\nhttps:\/\/plugins.trac.wordpress.org\/browser\/pressprimer-quiz\/tags\/2.2.2\/includes\/api\/class-ppq-rest-controller.php#L1786\\nhttps:\/\/plugins.trac.wordpress.org\/browser\/pressprimer-quiz\/tags\/2.2.2\/includes\/api\/class-ppq-rest-controller.php#L1813\\nhttps:\/\/plugins.trac.wordpress.org\/browser\/pressprimer-quiz\/tags\/2.2.2\/includes\/api\/class-ppq-rest-controller.php#L1703\\nhttps:\/\/plugins.trac.wordpress.org\/browser\/pressprimer-quiz\/tags\/2.2.2\/includes\/api\/class-ppq-rest-controller.php#L1860\\nhttps:\/\/plugins.trac.wordpress.org\/browser\/pressprimer-quiz\/tags\/2.2.2\/includes\/api\/class-ppq-rest-controller.php#L434\\nhttps:\/\/plugins.trac.wordpress.org\/browser\/pressprimer-quiz\/tags\/2.1.0\/includes\/api\/class-ppq-rest-controller.php#L1923\\nhttps:\/\/plugins.trac.wordpress.org\/browser\/pressprimer-quiz\/tags\/2.1.0\/includes\/api\/class-ppq-rest-controller.php#L1963\\nhttps:\/\/plugins.trac.wordpress.org\/browser\/pressprimer-quiz\/tags\/2.1.0\/includes\/api\/class-ppq-rest-controller.php#L1786\\nhttps:\/\/plugins.trac.wordpress.org\/browser\/pressprimer-quiz\/tags\/2.1.0\/includes\/api\/class-ppq-rest-controller.php#L1813\\nhttps:\/\/plugins.trac.wordpress.org\/browser\/pressprimer-quiz\/tags\/2.1.0\/includes\/api\/class-ppq-rest-controller.php#L1703\\nhttps:\/\/plugins.trac.wordpress.org\/browser\/pressprimer-quiz\/tags\/2.1.0\/includes\/api\/class-ppq-rest-controller.php#L1860\\nhttps:\/\/plugins.trac.wordpress.org\/browser\/pressprimer-quiz\/tags\/2.1.0\/includes\/api\/class-ppq-rest-controller.php#L434\\nhttps:\/\/github.com\/PressPrimer\/pressprimer-quiz\/commit\/1795687″,”id”:”CVE-2026-10623″,”bulletinFamily”:””,”cwe”:[“CWE-639″],”cvelist”:null,”sourceData”:”pressprimer PressPrimer Quiz \u2013 AI Quiz Maker, Exam Builder \\u0026 LMS Assessment Plugin 0″,”sourceHref”:””,”cvss”:{“score”:4.3,”severity”:”MEDIUM”,”vector”:”CVSS:3.1\/AV:N\/AC:L\/PR:L\/UI:N\/S:U\/C:N\/I:L\/A:N”,”version”:”3.1″},”cvss2″:{},”cvss3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””,”cvssV3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””}},”href”:””,”category_name”:”CVE”,”post_link”:””,”product”:”PressPrimer Quiz \u2013 AI Quiz Maker, Exam Builder \\u0026 LMS Assessment Plugin”,”version”:”0″,”vendor”:”pressprimer”,”ai_description”:””,”ai_severity”:””,”ai_vendor”:””,”ai_product”:””,”ai_version”:””,”ai_score”:0}<\/p>\n","protected":false},"excerpt":{"rendered":"

{“lastseen”:””,”description”:”The PressPrimer Quiz \u2013 AI Quiz Maker, Exam Builder \\u0026 LMS Assessment Plugin plugin for WordPress is vulnerable to Insecure Direct Object Reference in all…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[6,8,123,12,21,13,7,11,5],"class_list":["post-64212","post","type-post","status-publish","format-standard","hentry","category-category_cve","tag-cve","tag-cvss","tag-cvss-43","tag-exploit","tag-medium","tag-news","tag-security","tag-tapic","tag-vulnerability"],"yoast_head":"\nPressPrimer Quiz<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/zero.redgem.net\/?p=64212\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"PressPrimer Quiz\" \/>\n<meta property=\"og:description\" content=\"{“lastseen”:””,”description”:”The PressPrimer Quiz \u2013 AI Quiz Maker, Exam Builder u0026 LMS Assessment Plugin plugin for WordPress is vulnerable to Insecure Direct Object Reference in all...\" \/>\n<meta property=\"og:url\" content=\"https:\/\/zero.redgem.net\/?p=64212\" \/>\n<meta property=\"og:site_name\" content=\"zero redgem\" \/>\n<meta property=\"article:published_time\" content=\"2026-06-19T08:31:15+00:00\" \/>\n<meta name=\"author\" content=\"invoker\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"invoker\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/?p=64212#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/?p=64212\"},\"author\":{\"name\":\"invoker\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#\\\/schema\\\/person\\\/fbfeae8dfad117ac08a7621bee1a1dca\"},\"headline\":\"PressPrimer Quiz\",\"datePublished\":\"2026-06-19T08:31:15+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/?p=64212\"},\"wordCount\":2,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#organization\"},\"keywords\":[\"CVE\",\"CVSS\",\"CVSS-4.3\",\"exploit\",\"MEDIUM\",\"news\",\"Security\",\"tapic\",\"Vulnerability\"],\"articleSection\":[\"category_cve\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/zero.redgem.net\\\/?p=64212#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/?p=64212\",\"url\":\"https:\\\/\\\/zero.redgem.net\\\/?p=64212\",\"name\":\"PressPrimer Quiz\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#website\"},\"datePublished\":\"2026-06-19T08:31:15+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/?p=64212#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/zero.redgem.net\\\/?p=64212\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/?p=64212#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/zero.redgem.net\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"PressPrimer Quiz\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#website\",\"url\":\"https:\\\/\\\/zero.redgem.net\\\/\",\"name\":\"zero redgem\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/zero.redgem.net\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#organization\",\"name\":\"zero redgem\",\"url\":\"https:\\\/\\\/zero.redgem.net\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"\",\"contentUrl\":\"\",\"width\":191,\"height\":188,\"caption\":\"zero redgem\"},\"image\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#\\\/schema\\\/person\\\/fbfeae8dfad117ac08a7621bee1a1dca\",\"name\":\"invoker\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/f17c01d7338e6932bcde121cf83569393df3374625d25afd62677cfb528f2e3e?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/f17c01d7338e6932bcde121cf83569393df3374625d25afd62677cfb528f2e3e?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/f17c01d7338e6932bcde121cf83569393df3374625d25afd62677cfb528f2e3e?s=96&d=mm&r=g\",\"caption\":\"invoker\"},\"sameAs\":[\"https:\\\/\\\/zero.redgem.net\"],\"url\":\"https:\\\/\\\/zero.redgem.net\\\/?author=1\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"PressPrimer Quiz","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/zero.redgem.net\/?p=64212","og_locale":"en_US","og_type":"article","og_title":"PressPrimer Quiz","og_description":"{“lastseen”:””,”description”:”The PressPrimer Quiz \u2013 AI Quiz Maker, Exam Builder u0026 LMS Assessment Plugin plugin for WordPress is vulnerable to Insecure Direct Object Reference in all...","og_url":"https:\/\/zero.redgem.net\/?p=64212","og_site_name":"zero redgem","article_published_time":"2026-06-19T08:31:15+00:00","author":"invoker","twitter_card":"summary_large_image","twitter_misc":{"Written by":"invoker","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/zero.redgem.net\/?p=64212#article","isPartOf":{"@id":"https:\/\/zero.redgem.net\/?p=64212"},"author":{"name":"invoker","@id":"https:\/\/zero.redgem.net\/#\/schema\/person\/fbfeae8dfad117ac08a7621bee1a1dca"},"headline":"PressPrimer Quiz","datePublished":"2026-06-19T08:31:15+00:00","mainEntityOfPage":{"@id":"https:\/\/zero.redgem.net\/?p=64212"},"wordCount":2,"commentCount":0,"publisher":{"@id":"https:\/\/zero.redgem.net\/#organization"},"keywords":["CVE","CVSS","CVSS-4.3","exploit","MEDIUM","news","Security","tapic","Vulnerability"],"articleSection":["category_cve"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/zero.redgem.net\/?p=64212#respond"]}]},{"@type":"WebPage","@id":"https:\/\/zero.redgem.net\/?p=64212","url":"https:\/\/zero.redgem.net\/?p=64212","name":"PressPrimer Quiz","isPartOf":{"@id":"https:\/\/zero.redgem.net\/#website"},"datePublished":"2026-06-19T08:31:15+00:00","breadcrumb":{"@id":"https:\/\/zero.redgem.net\/?p=64212#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/zero.redgem.net\/?p=64212"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/zero.redgem.net\/?p=64212#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/zero.redgem.net\/"},{"@type":"ListItem","position":2,"name":"PressPrimer Quiz"}]},{"@type":"WebSite","@id":"https:\/\/zero.redgem.net\/#website","url":"https:\/\/zero.redgem.net\/","name":"zero redgem","description":"","publisher":{"@id":"https:\/\/zero.redgem.net\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/zero.redgem.net\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/zero.redgem.net\/#organization","name":"zero redgem","url":"https:\/\/zero.redgem.net\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/zero.redgem.net\/#\/schema\/logo\/image\/","url":"","contentUrl":"","width":191,"height":188,"caption":"zero redgem"},"image":{"@id":"https:\/\/zero.redgem.net\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/zero.redgem.net\/#\/schema\/person\/fbfeae8dfad117ac08a7621bee1a1dca","name":"invoker","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/f17c01d7338e6932bcde121cf83569393df3374625d25afd62677cfb528f2e3e?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/f17c01d7338e6932bcde121cf83569393df3374625d25afd62677cfb528f2e3e?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/f17c01d7338e6932bcde121cf83569393df3374625d25afd62677cfb528f2e3e?s=96&d=mm&r=g","caption":"invoker"},"sameAs":["https:\/\/zero.redgem.net"],"url":"https:\/\/zero.redgem.net\/?author=1"}]}},"_links":{"self":[{"href":"https:\/\/zero.redgem.net\/index.php?rest_route=\/wp\/v2\/posts\/64212","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/zero.redgem.net\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/zero.redgem.net\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/zero.redgem.net\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/zero.redgem.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=64212"}],"version-history":[{"count":0,"href":"https:\/\/zero.redgem.net\/index.php?rest_route=\/wp\/v2\/posts\/64212\/revisions"}],"wp:attachment":[{"href":"https:\/\/zero.redgem.net\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=64212"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/zero.redgem.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=64212"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/zero.redgem.net\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=64212"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}