Aller au contenu
8.6 Élevée

CVE-2026-84068 The Quentn WP WordPress plugin before 1.2.15 does not adequately escape a request parameter before using it in an…

Description

The Quentn WP WordPress plugin before 1.2.15 does not adequately escape a request parameter before using it in an unprepared SQL query, allowing unauthenticated attackers to extract arbitrary data from the database via SQL injection.

Produits et versions touchés

Produit Versions touchées Corrigé en
Quentn WP 1.2 1.2.13 → < 1.2.15 1.2.15
Les 2 CVE de Quentn WP →
Suivre cette CVE