Skip to content
OpenAdvisories

Product · Ays Pro

Quiz Maker

13 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2024-6028 Public exploit Scanner template EPSS 12%

    Quiz Maker <= 6.5.8.3 - Unauthenticated SQL Injection via 'ays_questions' Parameter

    The Quiz Maker plugin for WordPress is vulnerable to time-based SQL Injection via the 'ays_questions' parameter in all versions up to, and including, 6.5.8.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the…