CVE-2011-5216: Troyef Scorm Cloud

High severity, CVSS 7.5. EPSS: 2.4% chance of exploitation in the next 30 days.

SQL injection vulnerability in ajax.php in SCORM Cloud For WordPress plugin before 1.0.7 for WordPress allows remote attackers to execute arbitrary SQL commands via the active parameter. NOTE: some of these details are obtained from third party information.

Affected products

• Troyef Scorm Cloud: up to and including 1.0.6.6; version 1.0 only; version 1.0.1 only; version 1.0.2 only; version 1.0.3 only; version 1.0.4 only; …
• WordPress WordPress: affected versions not specified

Published 2012-10-25. Last modified 2026-06-16.