VulnCheck KEV: CVE-2021-24762

The Perfect Survey WordPress plugin before 1.5.2 does not validate and escape the questionid GET parameter before using it in a SQL statement in the getquestion AJAX action, allowing unauthenticated users to perform SQL injection...

PT-2022-9458

Name of the Vulnerable Software and Affected Versions The Perfect Survey WordPress plugin versions prior to 1.5.2 Description The issue allows unauthenticated users to perform SQL injection due to the lack of validation and escaping of the question id GET parameter in the "get question" AJAX...

PT-2021-15729

Name of the Vulnerable Software and Affected Versions: Tutor LMS – eLearning and online course solution WordPress plugin versions prior to 1.8.3 Description: The issue concerns a UNION based SQL injection vulnerability in the tutor quiz builder get question form AJAX action. This could potentiall...