More than 40,000 WordPress sites using the Quiz and Survey Master plugin have been affected by a SQL injection vulnerability that allowed authenticated users to interfere with database queries.

Attackers could even have used one vulnerable Lookout user to gain access to other Google Cloud tenants' environments.

Two vulnerabilities can be exploited to fully compromise instances of the Google Looker business intelligence platform.