CVE-2019-14231

CVE-2019-14231 is a critical SQL injection vulnerability affecting the Viral Quiz Maker - OnionBuzz plugin for WordPress, versions prior to 1.2.2. An unauthenticated attacker can exploit the 'points' parameter in the 'ob_get_results' AJAX handler due to a lack of sanitization. This allows for remote code execution and information disclosure, as reflected by its CVSS score of 9.8 (Critical). Despite its high severity, there is no evidence of active exploitation, public exploit code, or significant community discussion, suggesting a low current threat landscape.