7.3
High
CVE-2024-10633 The Quiz Maker Business, Developer, and Agency plugins for WordPress is vulnerable to arbitrary shortcode execution in…
Description
The Quiz Maker Business, Developer, and Agency plugins for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 8.8.0 (Business), up to, and including, 21.8.0 (Developer), and up to, and including, 31.8.0 (Agency). This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Quiz Maker Developer 21.8 | earliest → 21.8.0 | No fix stated |
| Quiz Maker Agency 31.8 | earliest → 31.8.0 | No fix stated |
| Quiz Maker Business 8.8 | earliest → 8.8.0 | No fix stated |
Other CVEs of Quiz Maker Developer
The 4 CVEs of Quiz Maker Developer →
CVE-2024-10574
The Quiz Maker Business, Developer, and Agency plugins for WordPress is vulnerable to unauthorized modification of…
7.2
High
CVE-2024-10628
The Quiz Maker Business, Developer, and Agency plugins for WordPress is vulnerable to SQL Injection via the ‘id’…
7.5
High
CVE-2024-10636
The Quiz Maker Business, Developer, and Agency plugins for WordPress is vulnerable to Reflected Cross-Site Scripting via…
6.1
Medium