Vendor
An unauthenticated time-based SQL injection vulnerability (CVE-2024-6028) exists in Ays-pro Quiz Maker plugin versions 6.5.8.3 and earlier, allowing attackers to exfiltrate database content via crafted POST requests.