More than 40,000 WordPress sites using the Quiz and Survey Master plugin have been affected by a SQL injection vulnerability that allowed authenticated users to interfere with database queries.
Attackers could even have used one vulnerable Lookout user to gain access to other Google Cloud tenants' environments.