Vulnerabilities in AYS Pro Plugins
7 resultsCVE-2024-22027MEDIUMImproper input validation vulnerability in WordPress Quiz Maker Plugin prior to 6.5.0.6 allows a remote authenticated attacker to perform a EPSS 0.7%CVE-2024-10628HIGHQuiz Maker Business, Developer, and Agency <= (Multiple Versions) - Unauthenticated SQL Injection via idEPSS 0.7%CVE-2024-10633HIGHQuiz Maker Business, Developer, and Agency <= (Multiple Versions) - Unauthenticated Arbitrary Shortcode Execution via contentEPSS 0.5%CVE-2024-10574HIGHQuiz Maker Business, Developer, and Agency <= (Multiple Versions) - Missing Authorization to Google Sheets Integration Credentials Modification and Stored Cross-Site ScriptingEPSS 0.5%CVE-2023-34423MEDIUMSurvey Maker prior to 3.6.4 contains a stored cross-site scripting vulnerability. If this vulnerability is exploited, an arbitrary script maEPSS 0.4%CVE-2024-10636MEDIUMQuiz Maker Business, Developer, and Agency <= (Multiple Versions) - Reflected DOM-Based Cross-Site Scripting via contentEPSS 0.3%CVE-2023-35764MEDIUMInsufficient verification of data authenticity issue in Survey Maker prior to 3.6.4 allows a remote unauthenticated attacker to spoof an IP EPSS 0.3%