Skip to content
Sign in
8.6 High

CVE-2026-84068 The Quentn WP WordPress plugin before 1.2.15 does not adequately escape a request parameter before using it in an…

Description

The Quentn WP WordPress plugin before 1.2.15 does not adequately escape a request parameter before using it in an unprepared SQL query, allowing unauthenticated attackers to extract arbitrary data from the database via SQL injection.

Affected products and versions

Product Affected versions Fixed in
Quentn WP 1.2 1.2.13 → < 1.2.15 1.2.15

Other CVEs of Quentn WP

The 2 CVEs of Quentn WP →
CVE-2026-84113 The Quentn WP WordPress plugin before 1.2.15 does not properly sanitise and escape a parameter before using it in an SQL… 4.1 Medium
Track this CVE