Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

12 records

Vendor: prasunsen Component: Watu Quiz Clear all filters
TI-2025-28994 CVE-2025-46242 · GHSA-qqjf-wq8v-xgch

WordPress Watu Quiz plugin <= 3.4.3 - SQL Injection Vulnerability

Priority LOW 33

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Bob Watu Quiz watu allows SQL Injection.This issue affects Watu Quiz: from n/a through <= 3.4.3.

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.00366 Published 2025-04-22 No fix listed CWE-89
TI-2024-35990 CVE-2024-53792 · GHSA-59x8-4cph-rjq9

WordPress Watu Quiz plugin <= 3.4.1.2 - SQL Injection vulnerability

Priority LOW 38

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Bob Watu Quiz watu allows SQL Injection.This issue affects Watu Quiz: from n/a through <= 3.4.1.2.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00468 Published 2024-12-02 No fix listed CWE-89
TI-2024-02456 CVE-2024-2640 · GHSA-c7x7-vc85-8vmc

Watu Quiz < 3.4.1.2 - Author+ Stored XSS

Priority MEDIUM 63

The Watu Quiz WordPress plugin before 3.4.1.2 does not sanitise and escape some of its settings, which could allow users such as authors (if they've been authorized by admins) to perform Stored Cross-Site Scripting attac…

CVSS 3.1MEDIUM 6.8 Network Low privileges User interaction EPSS 0.00394 Published 2024-07-12 Fixed in 3.4.1.2 CWE-79
TI-2024-00806 CVE-2024-0873 · GHSA-354p-799c-vqvc

Watu Quiz <= 3.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

Priority LOW 29

The Watu Quiz plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'watu-basic-chart' shortcode in all versions up to, and including, 3.4.1 due to insufficient input sanitization and output…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.0048 Published 2024-04-09 No fix listed CWE-79
TI-2024-00805 CVE-2024-0872 · GHSA-49pj-m3ff-pg2m

Watu Quiz <= 3.4.1 - Sensitive Information Disclosure

Priority LOW 21

The Watu Quiz plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.4.1 via the watu-userinfo shortcode.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00496 Published 2024-04-09 No fix listed CWE-639
TI-2023-00919 CVE-2023-0968 · GHSA-xwp2-26xm-vq22

Watu Quiz <= 3.3.9 - Reflected Cross-Site Scripting

Priority LOW 30

The Watu Quiz plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘dn’, 'email', 'points', and 'date' parameters in versions up to, and including, 3.3.9 due to insufficient input sanitization and…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01252 Published 2023-03-03 No fix listed CWE-79
TI-2023-00406 CVE-2023-0429 · GHSA-fr8p-9xx7-rw2c

Watu Quiz < 3.3.8.3 - Admin+ Stored XSS

Priority MEDIUM 55

The Watu Quiz WordPress plugin before 3.3.8.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltere…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.0047 Published 2023-02-21 Fixed in 3.3.8.2
TI-2023-00405 CVE-2023-0428 · GHSA-3hmj-jp49-3cjx

Watu Quiz < 3.3.8.2 - Reflected XSS

Priority HIGH 68

The Watu Quiz WordPress plugin before 3.3.8.2 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users s…

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.00632 Published 2023-02-21 Fixed in 3.3.8.2 CWE-79