CVE-2026-84068
Quentn WP 1.2.13 - 1.2.14 - Unauthenticated SQLi via 'qntn_wp' Parameter
HIGH 8.6EPSS 0.4%
The Quentn WP WordPress plugin before 1.2.15 does not adequately escape a request parameter before using it in an unprepared SQL query, allowing unauthenticated attackers to extract arbitrary data from the database via SQL injection.
- Affected
- Quentn WP
- CVSS v3.1 CNA
- 8.6 HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N - EPSS
- 0.45% chance of exploitation in the next 30 days, 37th percentile
- Published
- 2026-09-09