UNKNOWN NVD

CVE-2026-87771

The Product Question and Answer WordPress plugin through 1.1.0 does not sanitize and escape parameters before using them in SQL queries on AJAX actions availabl

The Product Question and Answer WordPress plugin through 1.1.0 does not sanitize and escape parameters before using them in SQL queries on AJAX actions available to unauthenticated users, allowing unauthenticated attackers to perform SQL injection attacks and extract sensitive data from the database.

References

https://wpscan.com/vulnerability/d71642f0-431c-42fc-bf3f-2b7b3c4e3954/

Published: 2026-09-18 · Source: NVD · Feed updated: 2026-09-18

This unknown severity vulnerability was published on 2026-09-18 via NVD.

vulnfeed aggregates 14468 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.