EUVD-2024-19633

Malicious code in bioql PyPI...

WordPress Quiz Maker plugin <= 6.5.9.8 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by Krugov Artyom in WordPress Plugin Quiz Maker versions = 6.5.9.8...

CVE-2025-30774 WordPress Quiz Maker plugin <= 6.6.8.7 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Ays Pro Quiz Maker quiz-maker allows SQL Injection.This issue affects Quiz Maker: from n/a through = 6.6.8.7...

CVE-2025-30774

CVE-2025-30774 is an unauthenticated SQL injection in the WordPress plugin “Quiz Maker” (Quiz Maker Business). Affected: Quiz Maker versions up to 6.6.8.7 (no details on exact build metadata in the Initial/connected docs). Evidence in connected docs indicates the vulnerability exists in that plug...

CVE-2024-10628

The Quiz Maker Business, Developer, and Agency plugins for WordPress is vulnerable to SQL Injection via the ‘id’ parameter in all versions up to, and including, 8.8.0 Business, up to, and including, 21.8.0 Developer, and up to, and including, 31.8.0 Agency due to insufficient escaping on the user...

WordPress Quiz Maker Plugin <= 6.5.2.4 is vulnerable to Broken Access Control

Software Quiz Maker Type Plugin Vulnerable versions = 6.5.2.4 Fixed in 6.5.2.5 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-1078 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 0653250f4b8f Credits Lucio Sá Required privilege...

CVE-2024-22027

Improper input validation vulnerability in WordPress Quiz Maker Plugin prior to 6.5.0.6 allows a remote authenticated attacker to perform a Denial of Service DoS attack against external services...

WordPress plugin Quiz Maker 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

WordPress Quiz Maker Plugin <= 6.3.9.4 is vulnerable to Content Spoofing

Software Quiz Maker Type Plugin Vulnerable versions = 6.3.9.4 Fixed in 6.3.9.5 OWASP Top 10 A1: Injection Classification Content Spoofing CVE CVE-2023-23985 Patch priority Low CVSS severity Low 3.7 Developer Claim ownership PSID 06c670b37093 Credits yuyudhn Required privilege Unauthenticated...