High severity7.2NVD Advisory· Published Aug 2, 2021· Updated Jun 17, 2026
CVE-2021-24456
CVE-2021-24456
Description
The Quiz Maker WordPress plugin before 6.2.0.9 did not properly sanitise and escape the order and orderby parameters before using them in SQL statements, leading to SQL injection issues in the admin dashboard
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:ays-pro:quiz_maker:*:*:*:*:*:wordpress:*:*+ 1 more
- cpe:2.3:a:ays-pro:quiz_maker:*:*:*:*:*:wordpress:*:*range: <6.2.0.9
- (no CPE)range: 6.2.0.9
Patches
Vulnerability mechanics
References
1- wpscan.com/vulnerability/929ad37d-9cdb-4117-8cd3-cf7130a7c9d4nvdThird Party Advisory
News mentions
0No linked articles in our index yet.