8.6
Élevée
CVE-2026-89214 The WpCues Basic Quiz WordPress plugin through 1.6.5 does not properly sanitise and escape values before using them in a…
Description
The WpCues Basic Quiz WordPress plugin through 1.6.5 does not properly sanitise and escape values before using them in a SQL statement, which allows unauthenticated attackers to perform SQL injection attacks and read data from the database.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| WpCues Basic Quiz 1.6 | premières → 1.6.5 | Pas de correctif indiqué |