{"id":"CVE-2025-53328","aliases":["EUVD-2025-25990","GHSA-4jhf-jqwp-72jc"],"status":"published","title":"WordPress Poll, Survey \u0026 Quiz Maker Plugin by Opinion Stage Plugin \u003c= 19.11.0 - Local File Inclusion Vulnerability","description":"Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Opinion Stage Poll, Survey \u0026 Quiz Maker Plugin by Opinion Stage social-polls-by-opinionstage allows PHP Local File Inclusion.This issue affects Poll, Survey \u0026 Quiz Maker Plugin by Opinion Stage: from n/a through \u003c= 19.11.0.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00624,"percentile":0.50287,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-98"],"published":"2025-08-28T12:37:27Z","modified":"2026-06-17T09:38:02Z","products":[{"vendor":"assaf parag","product":"poll, survey \u0026 quiz maker plugin by opinion stage"},{"vendor":"opinion stage","product":"poll, survey \u0026 quiz maker plugin by opinion stage"}],"references":[{"url":"https://patchstack.com/database/Wordpress/Plugin/social-polls-by-opinionstage/vulnerability/wordpress-poll-survey-quiz-maker-plugin-by-opinion-stage-plugin-19-11-0-local-file-inclusion-vulnerability?_s_id=cve","tags":["vdb-entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-53328"},{"url":"https://patchstack.com/database/wordpress/plugin/social-polls-by-opinionstage/vulnerability/wordpress-poll-survey-quiz-maker-plugin-by-opinion-stage-plugin-19-11-0-local-file-inclusion-vulnerability?_s_id=cve"},{"url":"https://github.com/advisories/GHSA-4jhf-jqwp-72jc"}],"sources":{"cve":[{"id":"CVE-2025-53328","title":"WordPress Poll, Survey \u0026 Quiz Maker Plugin by Opinion Stage Plugin \u003c= 19.11.0 - Local File Inclusion Vulnerability","description":"Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Opinion Stage Poll, Survey \u0026 Quiz Maker Plugin by Opinion Stage social-polls-by-opinionstage allows PHP Local File Inclusion.This issue affects Poll, Survey \u0026 Quiz Maker Plugin by Opinion Stage: from n/a through \u003c= 19.11.0.","status":"published","published":"2025-08-28T12:37:27.714Z","modified":"2026-04-28T16:13:23.918Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-98"],"updated_at":"2026-11-02T14:32:48.853452Z"}],"euvd":[{"id":"EUVD-2025-25990","description":"Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Opinion Stage Poll, Survey \u0026 Quiz Maker Plugin by Opinion Stage social-polls-by-opinionstage allows PHP Local File Inclusion.This issue affects Poll, Survey \u0026 Quiz Maker Plugin by Opinion Stage: from n/a through \u003c= 19.11.0.","status":"published","published":"2025-08-28T12:37:27Z","modified":"2026-04-28T16:13:23Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T19:05:37.972538Z"}],"ghsa":[{"id":"GHSA-4jhf-jqwp-72jc","title":"Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File...","description":"Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Assaf Parag Poll, Survey \u0026 Quiz Maker Plugin by Opinion Stage allows PHP Local File Inclusion. This issue affects Poll, Survey \u0026 Quiz Maker Plugin by Opinion Stage: from n/a through 19.11.0.","status":"published","published":"2025-08-28T15:30:42Z","modified":"2025-08-28T15:30:50Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-98"],"updated_at":"2026-11-02T15:03:26.692558Z"}],"nvd":[{"id":"CVE-2025-53328","description":"Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Opinion Stage Poll, Survey \u0026 Quiz Maker Plugin by Opinion Stage social-polls-by-opinionstage allows PHP Local File Inclusion.This issue affects Poll, Survey \u0026 Quiz Maker Plugin by Opinion Stage: from n/a through \u003c= 19.11.0.","status":"published","published":"2025-08-28T13:16:03.907Z","modified":"2026-06-17T09:38:02.493Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-98"],"updated_at":"2026-11-02T14:11:25.826804Z"}]}}