WordPress Plugin Vulnerabilities

mTouch Quiz 3.0.6 - question.php quiz Parameter SQL Injection

Description

The mTouch Quiz WordPress plugin was affected by a question.php quiz Parameter SQL Injection security vulnerability.

Affects Plugins

Plugin icon
mtouch-quiz
Fixed in 3.0.7

References

CVE
CVE-2014-100022

Classification

Type
SQLI
OWASP top 10
A1: Injection
CWE
CWE-89

Miscellaneous

Verified
No
WPVDB ID
66e1d4a0-0470-433a-8c87-9c10506421fa

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2022-10-10
Title
AWP Classifieds Plugin < 4.3 - Unauthenticated SQLi
Published
2025-09-22
Title
Mail Mint < 1.18.7 - Authenticated (Administrator+) SQL Injection
Published
2024-11-08
Title
WP Contest <= 1.0.0 - Authenticated (Contributor+) SQL Injection
Published
2025-05-01
Title
Ultimate Auction Pro < 1.5.3 - Unauthenticated SQL Injection via 'auction_id'
Published
2026-04-08
Title
Blocksy Companion Pro < 2.1.29 - Unauthenticated SQL Injection