CVE-2014-100023: Multiple cross-site scripting (XSS) vulnerabilities in question.php in the mTouch Quiz before 3.0.7 for Wor...

Security readout for executives and security teams

CVE-2014-100023 is an older cross-site scripting issue in the WordPress mTouch Quiz plugin before 3.0.7. Affected sites could let attacker-supplied script or HTML reach an administrative quiz page, creating risk to administrator sessions and site integrity. Exposure is likely limited to WordPress installations running mTouch Quiz versions earlier than 3.0.7. The affected path is under wp-admin, so authentication or administrator interaction may matter, but the bundle does not prove the exact requirement. Prioritize if the plugin exists on public or business-critical WordPress sites. The issue is old and lacks active-exploitation evidence in the bundle, but administrative XSS can threaten content, credentials, and site trust. Mitigation focus: Upgrade mTouch Quiz to version 3.0.7 or later where available.; Remove or disable mTouch Quiz if it is unused or cannot be safely updated.; Restrict WordPress administrator access to trusted users and protected networks where practical..

Prepared

Jun 14, 2026, 05:41 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.