Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 25
Reset filtersQuiz Maker <= 6.7.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Quiz Maker <= 6.7.1.2 - Cross-Site Request Forgery
Quiz Maker <= 6.7.0.88 - Authenticated (Admin+) Stored Cross-Site Scripting
Quiz Maker <= 6.7.0.82 - Cross-Site Request Forgery
Quiz Maker <= 6.7.0.80 - Unauthenticated Sensitive Information Exposure
Quiz Maker <= 6.7.0.65 - Unauthenticated Sensitive Information Exposure
Quiz Maker <= 6.7.0.64 - Cross-Site Request Forgery
Quiz Maker <= 6.7.0.56 - Unauthenticated SQL Injection
Quiz Maker <= 6.6.8.7 - Unauthenticated SQL Injection
Quiz Maker Business, Developer, and Agency <= (Multiple Versions) - Unauthenticated Arbitrary Shortcode Execution via content
Quiz Maker Business, Developer, and Agency <= (Multiple Versions) - Missing Authorization to Google Sheets Integration Credentials Modification and Stored Cross-Site Scripting
Quiz Maker Business, Developer, and Agency <= (Multiple Versions) - Unauthenticated SQL Injection via id
Quiz Maker Business, Developer, and Agency <= (Multiple Versions) - Reflected DOM-Based Cross-Site Scripting via content
Quiz Maker <= 6.5.9.8 - Authenticated (Admin+) Stored Cross-Site Scripting
Quiz Maker <= 6.5.8.3 - Unauthenticated SQL Injection via 'ays_questions' Parameter
Quiz Maker <= 6.5.2.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Quiz Creation & Modification
Quiz Maker <= 6.5.2.4 - Missing Authorization to Unauthenticated Quiz Data Retrieval
Quiz Maker <= 6.5.0.5 - Denial of Service
Houzez Login Register <= 3.2.5 - Authenticated (Subscriber+) Privilege Escalation via Account Takeover
Quiz Maker <= 6.4.9.4 - Missing Authorization to Email Disclosure
Quiz Maker <= 6.4.9.4 - Reflected Cross-Site Scripting
Quiz Maker <= 6.4.2.6 - Reflected Cross-Site Scripting
Quiz Maker <= 6.3.9.4 - Content Spoofing
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.