7.3
Élevée
CVE-2024-10633 The Quiz Maker Business, Developer, and Agency plugins for WordPress is vulnerable to arbitrary shortcode execution in…
Description
The Quiz Maker Business, Developer, and Agency plugins for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 8.8.0 (Business), up to, and including, 21.8.0 (Developer), and up to, and including, 31.8.0 (Agency). This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Quiz Maker Developer 21.8 | premières → 21.8.0 | Pas de correctif indiqué |
| Quiz Maker Agency 31.8 | premières → 31.8.0 | Pas de correctif indiqué |
| Quiz Maker Business 8.8 | premières → 8.8.0 | Pas de correctif indiqué |
Autres CVE de Quiz Maker Developer
Les 4 CVE de Quiz Maker Developer →
CVE-2024-10574
The Quiz Maker Business, Developer, and Agency plugins for WordPress is vulnerable to unauthorized modification of…
7.2
Élevée
CVE-2024-10628
The Quiz Maker Business, Developer, and Agency plugins for WordPress is vulnerable to SQL Injection via the ‘id’…
7.5
Élevée
CVE-2024-10636
The Quiz Maker Business, Developer, and Agency plugins for WordPress is vulnerable to Reflected Cross-Site Scripting via…
6.1
Moyenne