TI-2017-07208 CVE-2017-9834 · GHSA-9954-27rg-wfmqSQL injection vulnerability in the WatuPRO plugin before 5.5.3.7 for WordPress allows…Priority MEDIUM 49SQL injection vulnerability in the WatuPRO plugin before 5.5.3.7 for WordPress allows remote attackers to execute arbitrary SQL commands via the watupro_questions parameter in a watupro_submit action to wp-admin/admin-aj…CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.04069 · Published 2017-09-07 · No fix listed CWE-89