Not rated
CVE-2021-24456 The Quiz Maker WordPress plugin before 6.2.0.9 did not properly sanitise and escape the order and orderby parameters…
Description
The Quiz Maker WordPress plugin before 6.2.0.9 did not properly sanitise and escape the order and orderby parameters before using them in SQL statements, leading to SQL injection issues in the admin dashboard
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Quiz Maker 6.2 | earliest → < 6.2.0.9 | 6.2.0.9 |
Other CVEs of Quiz Maker
The 7 CVEs of Quiz Maker →
CVE-2026-110379
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ays Pro Quiz Maker…
7.1
High
CVE-2026-32342
Cross-Site Request Forgery (CSRF) vulnerability in Ays Pro Quiz Maker quiz-maker allows Cross Site Request…
4.3
Medium
CVE-2025-67595
Cross-Site Request Forgery (CSRF) vulnerability in Ays Pro Quiz Maker quiz-maker allows Cross Site Request…
4.3
Medium
CVE-2025-58015
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Ays Pro Quiz Maker…
5.3
Medium