4.1
Medium
CVE-2026-84113 The Quentn WP WordPress plugin before 1.2.15 does not properly sanitise and escape a parameter before using it in an SQL…
Description
The Quentn WP WordPress plugin before 1.2.15 does not properly sanitise and escape a parameter before using it in an SQL query, allowing high privilege users such as administrators to perform SQL injection attacks.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Quentn WP 1.2 | earliest → < 1.2.15 | 1.2.15 |