The Quiz Maker plugin for WordPress versions up to and including 6.7.0.80 has a vulnerability that allows unauthenticated attackers to access sensitive quiz answers. This occurs because the plugin exposes quiz answers through an AJAX action without proper authorization, relying only on a nonce that is publicly accessible to all site visitors.