Really Simple Security logo

Log out
Get PRO

Latest

Input validation vulnerability in Watu Quiz 2.6.7

  • Severity: high-risk
  • Status: Fixed
  • Publication: November 20, 2015

The Watu Quiz plugin for WordPress is vulnerable to a type of hacking called SQL Injection. This vulnerability exists in versions of the plugin up to and including 2.6.7. It is caused by a user supplied parameter not being properly escaped and a lack of proper preparation of existing SQL queries. This makes it possible for attackers with administrative privileges to add their own malicious SQL queries to existing queries that could be used to steal sensitive information from the database.

Detected in:

Watu Quiz fixed vulnerable versions: >= * <= 2.6.7

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.