CVE-2026-84113

MediumCVSS 4.1

Published: 09/09/2026(UTC)Updated: 09/09/2026(UTC)Translated: 09/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.16%

5th percentile - higher than 5% of all known CVEs

Summary

The Quentn WP WordPress plugin before version 1.2.15 does not properly sanitize and escape a parameter before using it in an SQL query, allowing high privilege users such as administrators to perform SQL injection attacks.

Risk Assessment

An attacker with administrator privileges can extract or modify database data, potentially leading to data integrity compromise and full site takeover.

Recommendation

Update the Quentn WP plugin to version 1.2.15 or later, which includes fixes for SQL injection vulnerabilities.

Other vulnerabilities in Quentn WP

CVE-2026-84068High
The Quentn WP WordPress plugin before version 1.2.15 does not adequately escape a request parameter before using it in an unprepared SQL query, allowing unauthenticated attackers to extract arbitrary data from the database via SQL injection.

Original NVD description (English source)

The Quentn WP WordPress plugin before 1.2.15 does not properly sanitise and escape a parameter before using it in an SQL query, allowing high privilege users such as administrators to perform SQL injection attacks.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS