Product

Question Answer Plugin <= 1.2.73

1 brief RSS

WordPress PickPlugins Question Answer Plugin SQL Injection Vulnerability (CVE-2026-10207)

An unauthenticated SQL injection vulnerability, tracked as CVE-2026-10207, exists in the PickPlugins Question Answer plugin for WordPress versions up to and including 1.2.73, allowing attackers to extract sensitive database information due to insufficient input sanitization of the 'id' GET parameter and improper SQL query construction.

Question Answer plugin <= 1.2.73 wordpress sql-injection vulnerability web-application

1r 2t 1c 1d ago