CVE-2024-6810

The Quiz Organizer plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 2.9.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.

• CWE-79

• https://plugins.trac.wordpress.org/browser/quiz-organizer/trunk/src/includes/admin/admin-modify-quiz.php#L230
• https://plugins.trac.wordpress.org/browser/quiz-organizer/trunk/src/includes/admin/admin-modify-quiz.php#L570
• https://plugins.trac.wordpress.org/browser/quiz-organizer/trunk/src/includes/sets/class-qzorg-plug-shortcode.php#L508
• https://wordpress.org/plugins/quiz-organizer/#developers
• https://www.wordfence.com/threat-intel/vulnerabilities/id/651646b0-231f-401c-9f6d-d414609bd7ba?source=cve

Published

Feb 26, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-6804The Jeg Elementor Kit plugin for WordPress is vulnerable to …5.4
• CVE-2024-6805The NI VeriStand Gateway is missing authorization checks whe…9.8
• CVE-2024-6806The NI VeriStand Gateway is missing authorization checks whe…9.8
• CVE-2024-6807A vulnerability was found in SourceCodester Student Study Ce…3.4
• CVE-2024-6808A vulnerability was found in itsourcecode Simple Task List 1…9.8
• CVE-2024-6809The Simple Video Directory WordPress plugin before 1.4.3 doe…9.8
• CVE-2024-6811IrfanView WSQ File Parsing Out-Of-Bounds Write Remote Code E…7.8
• CVE-2024-6812IrfanView WSQ File Parsing Out-Of-Bounds Write Remote Code E…7.8
• CVE-2024-6813NETGEAR ProSAFE Network Management System getSortString SQL …8.8
• CVE-2024-6814NETGEAR ProSAFE Network Management System getFilterString SQ…8.8
• CVE-2024-6815IrfanView RLE File Parsing Out-Of-Bounds Write Remote Code E…7.8
• CVE-2024-6816IrfanView PSP File Parsing Heap-based Buffer Overflow Remote…7.8