Assafp vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Assafp products: 1 record(s), with severity, exploitation and fixes.

Quiz, Poll & Survey Maker by Opinion Stage 1

Exploited only (KEV) →

CVE-2025-13143 Medium · 4.3 CWE-352 Nov 27, 2025

Poll, Survey & Quiz Maker Plugin by Opinion Stage <= 19.12.0 - Cross-Site Request Forgery to Account Disconnection

The Poll, Survey & Quiz Maker Plugin by Opinion Stage plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 19.12.0. This is due to missing or insufficient nonce validation on the disconnect_account_action function. This makes it possible for unauthenticated attackers to disconnect the site from the Opinion Stage platform integration via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.