CVE-2021-24456: Ays-Pro Quiz Maker

High severity, CVSS 7.2. EPSS: 1.3% chance of exploitation in the next 30 days.

The Quiz Maker WordPress plugin before 6.2.0.9 did not properly sanitise and escape the order and orderby parameters before using them in SQL statements, leading to SQL injection issues in the admin dashboard

Affected products

• Ays-Pro Quiz Maker: before 6.2.0.9 (fixed in 6.2.0.9)

Published 2021-08-02. Last modified 2026-06-17.