SQL Injection Threat: 40K+ Sites at Risk from QSM Plugin

Date:

Alert: Quiz and Survey Master Plugin Vulnerability Requires Immediate Attention

A significant security issue has been identified in the Quiz and Survey Master (QSM) plugin, which has over 40,000 active installations. A Subscriber+ SQL injection vulnerability was discovered, allowing logged-in users to execute harmful commands on the database. This issue affects versions 10.3.1 and below.

It’s crucial for users to update to at least version 10.3.2, where this vulnerability has been patched. Failure to do so may expose your site to potential data breaches, putting sensitive information at risk.

For all QSM users, we recommend updating the plugin immediately to protect your website. The risk level associated with this vulnerability is high, making prompt action essential for maintaining your site’s security. Stay safe and ensure your plugins are up to date!

Source: View Original Report

Share post:

spot_imgspot_img

Popular

More like this
Related

WPScan 4.0.0: Critical XSS Vulnerability Exposed!

WordPress Vulnerability Report: WPScan 4.0.0 Released Introduction The latest version of...

119 Edge Extensions: Malware Disguised as Useful Tools

Cybersecurity Alert: Malware Infiltrates Popular Browser Extensions A recent malware...

200K WordPress Sites Face XSS Risk from Burst Statistics Plugin

Critical Vulnerability Discovered in Burst Statistics Plugin for WordPress On...

Foxconn Cyberattack: Nitrogen Ransomware Strikes WordPress Sites

Cyberattack Hits Foxconn: Major Data Breach Reported Foxconn, the largest...