Mtouch Quiz Project Mtouch Quiz — known CVE vulnerabilities

Every CVE whose affected-product data names Mtouch Quiz Project Mtouch Quiz, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (7)

• CVE-2014-100022 — CVSS 7.5 (high): SQL injection vulnerability in question.php in the mTouch Quiz before 3.0.7 for WordPress allows remote attackers to execute arbitrary SQL…
• CVE-2015-9387 — CVSS 6.5 (medium): The mtouch-quiz plugin before 3.1.3 for WordPress has wp-admin/options-general.php CSRF.
• CVE-2015-9388 — CVSS 6.5 (medium): The mtouch-quiz plugin before 3.1.3 for WordPress has wp-admin/edit.php CSRF with resultant XSS.
• CVE-2015-9386 — CVSS 6.1 (medium): The mtouch-quiz plugin before 3.1.3 for WordPress has XSS via the quiz parameter during a Quiz Manage operation.
• CVE-2015-9389 — CVSS 5.4 (medium): The mtouch-quiz plugin before 3.1.3 for WordPress has XSS via a quiz name.
• CVE-2022-2410 — CVSS 4.8 (medium): The mTouch Quiz WordPress plugin through 3.1.3 does not sanitise and escape some of its settings, which could allow high privilege users…
• CVE-2014-100023 — CVSS 4.3 (medium): Multiple cross-site scripting (XSS) vulnerabilities in question.php in the mTouch Quiz before 3.0.7 for WordPress allow remote attackers to…