Approved changes feed: RSS · Atom

cpe:2.3:a:mtouch_quiz_project:mtouch_quiz:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

VendorMtouch Quiz Project (ef929893-6db0-56fb-881a-71ee228171e4)
ProductMtouch Quiz (7a483100-84f7-5cec-b965-70f117805da2)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-2410 vulnerable 2026-06-08 05:43:35.493832 mTouch Quiz <= 3.1.3 - Admin+ Stored Cross Site Scripting
The mTouch Quiz WordPress plugin through 3.1.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfiltered_html capability is disallowed (for example in multisite setup)
Published: 2022-08-08T13:49:29.000Z
Updated: 2024-08-03T00:39:07.785Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-9389 vulnerable 2026-06-08 05:07:13.643053 Details available
The mtouch-quiz plugin before 3.1.3 for WordPress has XSS via a quiz name.
Published: 2019-09-20T14:57:08.000Z
Updated: 2024-08-06T08:51:05.075Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-9388 vulnerable 2026-06-08 05:07:13.642783 Details available
The mtouch-quiz plugin before 3.1.3 for WordPress has wp-admin/edit.php CSRF with resultant XSS.
Published: 2019-09-20T14:56:10.000Z
Updated: 2024-08-06T08:51:05.231Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-9387 vulnerable 2026-06-08 05:07:13.642494 Details available
The mtouch-quiz plugin before 3.1.3 for WordPress has wp-admin/options-general.php CSRF.
Published: 2019-09-20T14:54:12.000Z
Updated: 2024-08-06T08:51:03.379Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-9386 vulnerable 2026-06-08 05:07:13.642122 Details available
The mtouch-quiz plugin before 3.1.3 for WordPress has XSS via the quiz parameter during a Quiz Manage operation.
Published: 2019-09-20T14:54:53.000Z
Updated: 2024-08-06T08:51:05.287Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-100023 vulnerable 2026-06-08 05:05:15.426007 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-100022 vulnerable 2026-06-08 05:05:15.425611 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.