Watu Quiz

Explore Watu Quiz vulnerabilities across all versions. Currently tracking 17 known vulnerabilities, including severity, impact, and patch status.

01234567891011.10.2011Today16.11.20147.2Watu Quiz <= 2.5.0.1 - Stored Cross-Site Scripting CVSS 7.2 · 16.11.201420.11.20157.2Watu Quiz <= 2.6.7 - Authenticated (Admin+) SQL Injection CVSS 7.2 · 20.11.201528.06.20197.1Watu Quiz 3.1.2.1 - 3.1.2.5 - Reflected Cross-Site Scripting CVSS 7.1 · 28.06.201924.01.20234.4Watu Quiz <= 3.3.8.2 - Authenticated (Admin+) Stored Cross-Site Scripting CVSS 4.4 · 24.01.20236.1Watu Quiz <= 3.3.8.1 - Reflected Cross-Site Scripting CVSS 6.1 · 24.01.202303.02.20234.4Watu Quiz <= 3.3.8 - Authenticated (Admin+) Stored Cross-Site Scripting CVSS 4.4 · 03.02.202303.03.20236.1Watu Quiz <= 3.3.9 - Reflected Cross-Site Scripting CVSS 6.1 · 03.03.202313.04.20236.1Watu Quiz <= 3.3.9.2 - Reflected Cross-Site Scripting via 'question' CVSS 6.1 · 13.04.202304.04.20244.3Watu Quiz <= 3.4.1 - Sensitive Information Disclosure CVSS 4.3 · 04.04.20246.4Watu Quiz <= 3.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting CVSS 6.4 · 04.04.202421.06.20246.4Watu Quiz <= 3.4.1.1 - Authenticated (Author+) Stored Cross-Site Scripting CVSS 6.4 · 21.06.202429.11.20246.5Watu Quiz <= 3.4.1.2 - Authenticated (Contributor+) SQL Injection CVSS 6.5 · 29.11.202401.04.20256.1Watu Quiz <= 3.4.2 - Reflected Cross-Site Scripting CVSS 6.1 · 01.04.202522.04.20254.9Watu Quiz <= 3.4.3 - Authenticated (Administrator+) SQL Injection CVSS 4.9 · 22.04.202524.10.20257.2Watu Quiz <= 3.4.4 - Unauthenticated Stored Cross-Site Scripting via HTTP Referer CVSS 7.2 · 24.10.202515.12.20254.3Watu Quiz <= 3.4.5 - Missing Authorization CVSS 4.3 · 15.12.202517.12.20254.3Watu Quiz <= 3.4.5 - Missing Authorization CVSS 4.3 · 17.12.2025

Strategic Overview

Avg CVSSMedium
5.8/ 10
Patch Coverage100%
Open

0

Fixed

17

Get automatic notifications for all Watu Quiz vulnerabilities before they are exploited.

Vulnerability Records

17 records
Watu Quiz banner
Latestv3.4.7

Watu Quiz

Bob

Author

Bob

4.7(136)
94/100
Last Updated
2026-05-28 (2mo ago)
Active Installs
3,000+
Downloads
422,030
Requires WP
6.0+
Requires PHP
8.0+
Tested up to
WP 7.0.2
Created
2011-10-11 (15y ago)

PRO | DEMO This plugin is constantly maintained and improved since 12 years! Create exams, surveys, and quizzes and display the result immediately after the user completes the questionnaire. You can assign grades and point levels for every grade in the exam / quiz. Then assign points to every answer to a question and Watu Quiz will figure out the grade based on the total number of points collected. Watu Quiz is a light version of Watu PRO. Check it if you want to run fully featured exams with data exports, student logins, elaborate grading system, categories, reports, data analysis, etc. Very quick and easy to start: Watu Quiz pre-fills a simple demo quiz with 3 questions when you install it. This plugin is mobile / touch – friendly. The quizzes will work on mobile devices and phones. Please go to Watu Quizzes in your dashboard to start creating quizzes, exams or surveys. Features Creates quizzes, surveys, tests, polls, questionnaires, and exams. Use shortcodes to embed quizzes in posts or pages or publish them automatically. Single-choice questions. Multiple-choice questions. Open-end questions (essays). Required questions. Survey questions (no correct / wrong state). Question categories & filter by category. Deactivate questions. Randomize questions. Pull random questions from a pool. Grades / personality types. Shows answers at the end of the quiz or immediately after selection. List of users who took the tests along with their results. Export results to a CSV file Import questions from a CSV file. Ajax-based loading of the quiz results. Optionally switch off to regular loading. Facebook and Twitter sharing of the quiz results. Mobile / touch – friendly user interface. Notify admin when someone takes a quiz. Send email to the quiz taker with their results. Schedule quizzes for a given date/time interval. You can connect to MailChimp using the Watu to MailChimp Bridge. A basic bar chart is available for showing user points vs. average points on a given quiz. GDPR compliance features: not storing IP addresses. Hooks a personal data eraser into the WordPress tools. Regularly supported and updated since 10 years. PHP 6, PHP 7, PHP 8 Compatible. Attention WordPress Network (Multi Site) Users When activating the plugin do it as blog admin and not as network admin. Online Demo Feel free to check the live demo here. It should answer most “pre-download” questions. If you have more doubts just download the plugin and check out if it works for you. It’s free and takes a few seconds to install and activate. Troubleshooting When opening a support thread please provide URL (link) where we can see your problem. A very common problem is not being able to submit the quiz, or the quiz does not displays at all. This is usually a fatal JavaScript error caused by other plugins or your them. If you are technical you can easily find the error yourself by checking the JavaScript error console in Chrome or Firefox. Disable the offending plugin and everything will start working normally. Developers API In order to allow other plugins to integrate better to Watu we have started working on developers API. The following action calls are currently available: = do_action(&#8216;watu_exam_submitted’, $taking_id) Called when exam is submitted, passes the attempt ID = do_action(&#8216;watu_exam_submitted_detailed’, $taking_id, $exam, $user_ID, $achieved, $g_id) Same as above but passes also the full exam object, the user ID, points and grade ID = do_action(&#8216;watu_exam_saved’, $exam_id) Called when you add or edit exam (after submitting the changes). Passes the changed exam ID. Community Translations Persian (Farsi) translation provided by Reza: download zip with .po / .mo files German translation provided by Peter Baumgartner is available here Russian translation provided by @Nikon: .po / .mo The included Romanian translation is provided by Andrei Ciuculescu Portuguese translation provided by José Costa Spanish translation provided by Sebastian Cetrangolo / seeeba Turkish translation provided by Muhammet AVCI

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C