CVE-2024-10628

CVE-2024-10628 affects Quiz Maker Business, Developer, and Agency WordPress plugins. The vulnerability is an unauthenticated SQL Injection via the id parameter caused by insufficient escaping and lack of proper query preparation, enabling attackers to append SQL to existing queries and potentiall...

CVE-2024-10628 Quiz Maker Business, Developer, and Agency <= (Multiple Versions) - Unauthenticated SQL Injection via id

The Quiz Maker Business, Developer, and Agency plugins for WordPress is vulnerable to SQL Injection via the ‘id’ parameter in all versions up to, and including, 8.8.0 Business, up to, and including, 21.8.0 Developer, and up to, and including, 31.8.0 Agency due to insufficient escaping on the user...

CVE-2024-10628

creationtimestamp| type| source ---|---|--- 2025-01-25 16:53:00+00:00| seen| https://bsky.app/profile/abrahack.bsky.social/post/3lgleqibozc2z 2025-01-26 05:27:37+00:00| seen| https://infosec.exchange/users/cve/statuses/113892999642194623 2025-01-26 05:31:36+00:00| seen|...