Input validation vulnerability in Quiz And Survey Master – Best Quiz, Exam and Survey Plugin for WordPress 4.4.4

The Quiz And Survey Master plugin for WordPress is vulnerable to a type of cyber attack called SQL Injection in versions before 4.4.4. This type of attack can be used to extract sensitive information from a website’s database. The vulnerability exists because of inadequate security measures in the plugin which don’t properly escape user supplied parameters and doesn’t prepare the existing SQL query. Low-privilege authenticated attackers are capable of exploiting this vulnerability.