174 matches found
CVE-2024-0873
The Watu Quiz plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'watu-basic-chart' shortcode in all versions up to, and including, 3.4.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticate...
CVE-2024-0872
The Watu Quiz plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.4.1 via the watu-userinfo shortcode. This makes it possible for authenticated attackers, with contributor-level access and above, to extract sensitive user meta data which ca...
CVE-2023-0968
The Watu Quiz plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘dn’, 'email', 'points', and 'date' parameters in versions up to, and including, 3.3.9 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...
CVE-2023-0429
The Watu Quiz WordPress plugin before 3.3.8.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
CVE-2023-30483
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Kiboko Labs Watu Quiz plugin = 3.3.9.2 versions...
CVE-2023-0428
The Watu Quiz WordPress plugin before 3.3.8.2 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...
CVE-2015-10111
A vulnerability was found in Watu Quiz Plugin up to 2.6.7 on WordPress. It has been rated as critical. This issue affects the function watuexams of the file controllers/exam.php of the component Exam Handler. The manipulation of the argument quiz leads to sql injection. The attack may be initiate...
CVE-2015-9418
The Watu Pro plugin before 4.9.0.8 for WordPress has CSRF that allows an attacker to delete quizzes...
CVE-2025-46242
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Bob Watu Quiz watu allows SQL Injection.This issue affects Watu Quiz: from n/a through = 3.4.3...
WordPress Watu Quiz plugin <= 3.4.3 - SQL Injection Vulnerability
SQL Injection Vulnerability discovered by astra.r3verii in WordPress Plugin Watu Quiz versions = 3.4.3...
CVE-2025-46242
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Bob Watu Quiz watu allows SQL Injection.This issue affects Watu Quiz: from n/a through = 3.4.3...
CVE-2025-46242
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Bob Watu Quiz allows SQL Injection. This issue affects Watu Quiz: from n/a through 3.4.3...
CVE-2025-46242 WordPress Watu Quiz <= 3.4.3 - SQL Injection Vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Bob Watu Quiz allows SQL Injection. This issue affects Watu Quiz: from n/a through 3.4.3...
CVE-2025-46242
CVE-2025-46242 — WordPress Watu Quiz plugin <= 3.4.3 SQL Injection Root cause: Improper neutralization of special elements used in SQL commands in Watu Quiz (WordPress plugin). The vulnerability enables SQL Injection in versions up to 3.4.3. Impact: Potential unauthorized access or data manipu...
CVE-2025-46242 WordPress Watu Quiz plugin <= 3.4.3 - SQL Injection Vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Bob Watu Quiz watu allows SQL Injection.This issue affects Watu Quiz: from n/a through = 3.4.3...
PT-2025-17507 · Watu Quiz · Watu Quiz
Name of the Vulnerable Software and Affected Versions: Watu Quiz versions 3.4.3 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. Recommendations: For...
WordPress plugin Watu Quiz SQL注入漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...
CVE-2025-30844
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bob Watu Quiz watu allows Reflected XSS.This issue affects Watu Quiz: from n/a through = 3.4.2...