CVE-2026-84068 — Quentn WP 1.2.13 - 1.2.14 - Unauthenticated SQLi via 'qntn_wp' Parameter
The Quentn WP WordPress plugin before 1.2.15 does not adequately escape a request parameter before using it in an unprepared SQL query, allowing unauthenticated attackers to ext…
Published: 2026-09-09 · CVSS: 8.6 · CVSS 3.1
The Quentn WP WordPress plugin before 1.2.15 does not adequately escape a request parameter before using it in an unprepared SQL query, allowing unauthenticated attackers to extract arbitrary data from the database via SQL injection.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7