Log in Start free

AYS Pro Plugins

Products

ProductCVEsExploitedLatest
Quiz Maker Agency4–Jan 26, 2025
Quiz Maker Business4–Jan 26, 2025
Quiz Maker Developer4–Jan 26, 2025
Survey Maker2–Apr 3, 2024
WordPress Quiz Maker Plugin1–Jan 12, 2024

Exploited and recent CVEs

  • CVE-2024-10633 High 7.3 Quiz Maker Business, Developer, and Agency <= (Multiple Versions) - Unauthenticated Arbitrary Shortcode Execution via content 0.6%
  • CVE-2024-10633 High 7.3 Quiz Maker Business, Developer, and Agency <= (Multiple Versions) - Unauthenticated Arbitrary Shortcode Execution via content 0.6%
  • CVE-2024-10633 High 7.3 Quiz Maker Business, Developer, and Agency <= (Multiple Versions) - Unauthenticated Arbitrary Shortcode Execution via content 0.6%
  • CVE-2024-10574 High 7.2 Quiz Maker Business, Developer, and Agency <= (Multiple Versions) - Missing Authorization to Google Sheets Integration Credentials Modification and Stored Cross-Site Scripting 0.5%
  • CVE-2024-10574 High 7.2 Quiz Maker Business, Developer, and Agency <= (Multiple Versions) - Missing Authorization to Google Sheets Integration Credentials Modification and Stored Cross-Site Scripting 0.5%
  • CVE-2024-10574 High 7.2 Quiz Maker Business, Developer, and Agency <= (Multiple Versions) - Missing Authorization to Google Sheets Integration Credentials Modification and Stored Cross-Site Scripting 0.5%
  • CVE-2024-10628 High 7.5 Quiz Maker Business, Developer, and Agency <= (Multiple Versions) - Unauthenticated SQL Injection via id 0.8%
  • CVE-2024-10628 High 7.5 Quiz Maker Business, Developer, and Agency <= (Multiple Versions) - Unauthenticated SQL Injection via id 0.8%
  • CVE-2024-10628 High 7.5 Quiz Maker Business, Developer, and Agency <= (Multiple Versions) - Unauthenticated SQL Injection via id 0.8%
  • CVE-2024-10636 Medium 6.1 Quiz Maker Business, Developer, and Agency <= (Multiple Versions) - Reflected DOM-Based Cross-Site Scripting via content 0.3%
  • CVE-2024-10636 Medium 6.1 Quiz Maker Business, Developer, and Agency <= (Multiple Versions) - Reflected DOM-Based Cross-Site Scripting via content 0.3%
  • CVE-2024-10636 Medium 6.1 Quiz Maker Business, Developer, and Agency <= (Multiple Versions) - Reflected DOM-Based Cross-Site Scripting via content 0.3%
  • CVE-2023-35764 Medium 5.3 Insufficient verification of data authenticity issue in Survey Maker prior to 3.6.4 allows a remote unauthenticated attacker to spoof an IP address when posting. 0.3%
  • CVE-2023-34423 Medium 6.1 Survey Maker prior to 3.6.4 contains a stored cross-site scripting vulnerability. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is logging 0.4%
  • CVE-2024-22027 Medium 6.5 Improper input validation vulnerability in WordPress Quiz Maker Plugin prior to 6.5.0.6 allows a remote authenticated attacker to perform a Denial of Service (DoS) attack against external services. 0.7%