CVE-2021-24456: vulnerability in Ays Pro Quiz Maker
Quiz Maker < 6.2.0.9 - Multiple Authenticated Blind SQL Injections
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 1.3%
The Quiz Maker WordPress plugin before 6.2.0.9 did not properly sanitise and escape the order and orderby parameters before using them in SQL statements, leading to SQL injection issues in the admin dashboard
Affected products
Ays Pro · Quiz MakerRelated CVEs — Ays Pro Quiz Maker
In the same product, most dangerous first.
CVE-2025-30774HIGHWordPress Quiz Maker plugin <= 6.6.8.7 - SQL Injection vulnerabilityEPSS 0.4%CVE-2025-58015MEDIUMWordPress Quiz Maker Plugin <= 6.7.0.65 - Sensitive Data Exposure VulnerabilityEPSS 0.3%CVE-2026-110379HIGHWordPress Quiz Maker plugin <= 6.7.1.91 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-58014MEDIUMWordPress Quiz Maker Plugin <= 6.7.0.64 - Cross Site Request Forgery (CSRF) VulnerabilityEPSS 0.1%CVE-2025-67595MEDIUMWordPress Quiz Maker plugin <= 6.7.0.82 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.1%CVE-2026-32342MEDIUMWordPress Quiz Maker plugin <= 6.7.1.2 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.1%