Advisories · Technology

Ays Pro Quiz Maker.

Every CVE that names Ays Pro Quiz Maker among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-110379 CVE record

CVSS 7.1 High

WordPress Quiz Maker plugin <= 6.7.1.91 - Cross Site Scripting (XSS) vulnerability
- Ays Pro Quiz Maker
- Cross-site scripting (XSS)
Not analysed yet 19 Oct 2026
CVE-2026-32342 CVE record

CVSS 4.3 Medium

WordPress Quiz Maker plugin <= 6.7.1.2 - Cross Site Request Forgery (CSRF) vulnerability
- Ays Pro Quiz Maker
- Cross-site request forgery (CSRF)
Not analysed yet 13 Mar 2026
CVE-2026-2384 CVE record

CVSS 6.4 Medium

Quiz Maker <= 6.7.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- ays-pro Quiz Maker
- Cross-site scripting (XSS)
Not analysed yet 20 Feb 2026
CVE-2025-67595 CVE record

CVSS 4.3 Medium

WordPress Quiz Maker plugin <= 6.7.0.82 - Cross Site Request Forgery (CSRF) vulnerability
- Ays Pro Quiz Maker
- Cross-site request forgery (CSRF)
Not analysed yet 9 Dec 2025
CVE-2025-12426 CVE record

CVSS 5.3 Medium

Quiz Maker <= 6.7.0.80 - Unauthenticated Sensitive Information Exposure
- ays-pro Quiz Maker
- Information disclosure
Not analysed yet 19 Nov 2025
CVE-2025-58014 CVE record

CVSS 4.3 Medium

WordPress Quiz Maker Plugin <= 6.7.0.64 - Cross Site Request Forgery (CSRF) Vulnerability
- Ays Pro Quiz Maker
- Cross-site request forgery (CSRF)
Not analysed yet 22 Sept 2025
CVE-2025-58015 CVE record

CVSS 5.3 Medium

WordPress Quiz Maker Plugin <= 6.7.0.65 - Sensitive Data Exposure Vulnerability
- Ays Pro Quiz Maker
- Information disclosure
Not analysed yet 22 Sept 2025
CVE-2025-10042 CVE record

CVSS 5.9 Medium

Quiz Maker <= 6.7.0.56 - Unauthenticated SQL Injection
- ays-pro Quiz Maker
- SQL injection
Not analysed yet 17 Sept 2025
CVE-2025-30774 CVE record

CVSS 8.2 High

WordPress Quiz Maker plugin <= 6.6.8.7 - SQL Injection vulnerability
- Ays Pro Quiz Maker
- SQL injection
Not analysed yet 1 Apr 2025
CVE-2024-6028 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Quiz Maker <= 6.5.8.3 - Unauthenticated SQL Injection via 'ays_questions' Parameter
- ays-pro Quiz Maker
- SQL injection
Not analysed yet 25 Jun 2024
CVE-2024-1078 CVE record

CVSS 4.3 Medium

Quiz Maker <= 6.5.2.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Quiz Creation & Modification
- ays-pro Quiz Maker
- Broken access control
Not analysed yet 7 Feb 2024
CVE-2024-1079 CVE record

CVSS 5.3 Medium

Quiz Maker <= 6.5.2.4 - Missing Authorization to Unauthenticated Quiz Data Retrieval
- ays-pro Quiz Maker
- Broken access control
Not analysed yet 7 Feb 2024
CVE-2021-24456 CVE record

Quiz Maker < 6.2.0.9 - Multiple Authenticated Blind SQL Injections
- Ays Pro Quiz Maker
- SQL injection
Not analysed yet 2 Aug 2021