WordPress SlickQuiz 1.3.7.1 SQL Injection

RCE Security Advisory https://www.rcesecurity.com 1. ADVISORY INFORMATION ======================= Product: SlickQuiz Vendor URL: https://wordpress.org/plugins/slickquiz/ Type: SQL Injection CWE-74 Date found: 2019-05-30 Date published: 2019-09-10 CVSSv3 Score: 8.1...

SlickQuiz <= 1.3.7.1 - Authenticated SQL Injection

The last time it was checked the plugin was still affected and had been closed...

SlickQuiz <= 1.3.7.1 - Unauthenticated Stored XSS

The last time it was checked the plugin was still affected and had been closed...

PT-2019-12837

Name of the Vulnerable Software and Affected Versions SlickQuiz plugin versions prior to 1.3.7.2 Description The issue allows SQL Injection by Subscriber users. This can be demonstrated through specific API endpoints such as "/wp-admin/admin.php?page=slickquiz-scores&id=",...

WordPress SlickQuiz 1.3.7.1 Cross Site Scripting

RCE Security Advisory https://www.rcesecurity.com 1. ADVISORY INFORMATION ======================= Product: SlickQuiz Vendor URL: https://wordpress.org/plugins/slickquiz/ Type: Cross-Site Scripting CWE-79 Date found: 2019-05-30 Date published: 2019-09-10 CVSSv3 Score: 6.1...