{"id":"CVE-2024-22027","aliases":["EUVD-2024-19633","GHSA-p7pv-w5qm-8pxv"],"status":"published","title":"Improper input validation vulnerability in WordPress Quiz Maker Plugin prior to 6.5.0.6 allows a...","description":"Improper input validation vulnerability in WordPress Quiz Maker Plugin prior to 6.5.0.6 allows a remote authenticated attacker to perform a Denial of Service (DoS) attack against external services.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-12","score":0.00726,"percentile":0.54606,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-20"],"published":"2024-01-12T06:41:29Z","modified":"2026-06-17T07:10:34Z","products":[{"vendor":"ays pro plugins","product":"wordpress quiz maker plugin"},{"vendor":"ays-pro","product":"quiz_maker"}],"references":[{"url":"https://wordpress.org/plugins/quiz-maker/","tags":["x_transferred","Product"]},{"url":"https://jvn.jp/en/jp/JVN37326856/","tags":["x_transferred","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-22027"},{"url":"https://jvn.jp/en/jp/JVN37326856"},{"url":"https://wordpress.org/plugins/quiz-maker"},{"url":"https://github.com/advisories/GHSA-p7pv-w5qm-8pxv"}],"sources":{"cve":[{"id":"CVE-2024-22027","description":"Improper input validation vulnerability in WordPress Quiz Maker Plugin prior to 6.5.0.6 allows a remote authenticated attacker to perform a Denial of Service (DoS) attack against external services.","status":"published","published":"2024-01-12T06:41:29.452Z","modified":"2025-06-05T18:21:22.928Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"adp"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:34:00.254134Z"}],"euvd":[{"id":"EUVD-2024-19633","description":"Improper input validation vulnerability in WordPress Quiz Maker Plugin prior to 6.5.0.6 allows a remote authenticated attacker to perform a Denial of Service (DoS) attack against external services.","status":"published","published":"2024-01-12T06:41:29Z","modified":"2025-06-05T18:21:22Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T20:32:29.13667Z"}],"ghsa":[{"id":"GHSA-p7pv-w5qm-8pxv","title":"Improper input validation vulnerability in WordPress Quiz Maker Plugin prior to 6.5.0.6 allows a...","description":"Improper input validation vulnerability in WordPress Quiz Maker Plugin prior to 6.5.0.6 allows a remote authenticated attacker to perform a Denial of Service (DoS) attack against external services.","status":"published","published":"2024-01-12T09:30:29Z","modified":"2025-06-05T21:31:43Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T15:02:35.664515Z"}],"nvd":[{"id":"CVE-2024-22027","description":"Improper input validation vulnerability in WordPress Quiz Maker Plugin prior to 6.5.0.6 allows a remote authenticated attacker to perform a Denial of Service (DoS) attack against external services.","status":"published","published":"2024-01-12T07:15:12.243Z","modified":"2026-06-17T07:10:34.04Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:09:30.070039Z"}]}}