SQL Injection Vulnerability in Quentn WP WordPress Plugin
CVE-2026-84068
Currently unrated
Key Information:
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2026-84068?
The Quentn WP WordPress plugin, prior to version 1.2.15, has a critical vulnerability that arises from improper escaping of request parameters in SQL queries. This flaw enables unauthenticated attackers to exploit the plugin, allowing them to perform SQL injection attacks. As a consequence, they can extract sensitive and arbitrary data from the database, posing significant security risks to affected WordPress sites.
Affected Version(s)
Quentn WP 1.2.13 < 1.2.15
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.