SQL Injection Vulnerability in Quentn WP Plugin for WordPress
CVE-2026-84113
Currently unrated
Key Information:
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2026-84113?
The Quentn WP plugin for WordPress prior to version 1.2.15 is vulnerable due to improper sanitization and escaping of user input in SQL queries. This flaw can allow high privilege users, such as administrators, to execute malicious SQL commands, potentially compromising the integrity of the database and exposing sensitive information. Users of the plugin should immediately update to the latest version to mitigate the risk associated with this vulnerability.
Affected Version(s)
Quentn WP 0 < 1.2.15
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.