CVE-2026-2468

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-2468", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "state": "PUBLISHED", "assignerShortName": "Wordfence", "dateReserved": "2026-02-13T14:24:46.547Z", "datePublished": "2026-03-21T03:26:48.906Z", "dateUpdated": "2026-04-08T16:57:45.768Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-04-08T16:57:45.768Z"}, "affected": [{"vendor": "quentn", "product": "Quentn WP", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "1.2.12", "versionType": "semver"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "The Quentn WP plugin for WordPress is vulnerable to SQL Injection via the 'qntn_wp_access' cookie in all versions up to, and including, 1.2.12. This is due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query in the `get_user_access()` method. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database."}], "title": "Quentn WP <= 1.2.12 - Unauthenticated SQL Injection via 'qntn_wp_access' Cookie", "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/653e20ae-f018-41b5-a973-f73fddae70e5?source=cve"}, {"url": "https://plugins.trac.wordpress.org/browser/quentn-wp/tags/1.2.12/includes/class-quentn-wp-restrict-access.php#L483"}, {"url": "https://plugins.trac.wordpress.org/browser/quentn-wp/trunk/includes/class-quentn-wp-restrict-access.php#L483"}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')", "cweId": "CWE-89", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "baseScore": 7.5, "baseSeverity": "HIGH"}}], "credits": [{"lang": "en", "type": "finder", "value": "Nabil Irawan"}], "timeline": [{"time": "2026-03-20T15:05:50.000Z", "lang": "en", "value": "Disclosed"}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-03-23T17:07:11.480357Z", "id": "CVE-2026-2468", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-23T17:07:19.150Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-2468", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-03-23T17:07:11.480357Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-23T17:07:15.363Z"}}], "cna": {"title": "Quentn WP <= 1.2.12 - Unauthenticated SQL Injection via 'qntn_wp_access' Cookie", "credits": [{"lang": "en", "type": "finder", "value": "Nabil Irawan"}], "metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"}}], "affected": [{"vendor": "quentn", "product": "Quentn WP", "versions": [{"status": "affected", "version": "0", "versionType": "semver", "lessThanOrEqual": "1.2.12"}], "defaultStatus": "unaffected"}], "timeline": [{"lang": "en", "time": "2026-03-20T15:05:50.000Z", "value": "Disclosed"}], "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/653e20ae-f018-41b5-a973-f73fddae70e5?source=cve"}, {"url": "https://plugins.trac.wordpress.org/browser/quentn-wp/tags/1.2.12/includes/class-quentn-wp-restrict-access.php#L483"}, {"url": "https://plugins.trac.wordpress.org/browser/quentn-wp/trunk/includes/class-quentn-wp-restrict-access.php#L483"}], "descriptions": [{"lang": "en", "value": "The Quentn WP plugin for WordPress is vulnerable to SQL Injection via the 'qntn_wp_access' cookie in all versions up to, and including, 1.2.12. This is due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query in the `get_user_access()` method. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-89", "description": "CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"}]}], "providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-04-08T16:57:45.768Z"}}}, "cveMetadata": {"cveId": "CVE-2026-2468", "state": "PUBLISHED", "dateUpdated": "2026-04-08T16:57:45.768Z", "dateReserved": "2026-02-13T14:24:46.547Z", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "datePublished": "2026-03-21T03:26:48.906Z", "assignerShortName": "Wordfence"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Quentn WP", "vendor": "quentn", "versions": [{"lessThanOrEqual": "1.2.12", "status": "affected", "version": "0", "versionType": "semver"}]}], "source": "security@wordfence.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The Quentn WP plugin for WordPress is vulnerable to SQL Injection via the 'qntn_wp_access' cookie in all versions up to, and including, 1.2.12. This is due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query in the `get_user_access()` method. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database."}, {"lang": "es", "value": "El plugin Quentn WP para WordPress es vulnerable a inyecci\u00f3n SQL a trav\u00e9s de la cookie 'qntn_wp_access' en todas las versiones hasta la 1.2.12, inclusive. Esto se debe a un escape insuficiente en el par\u00e1metro proporcionado por el usuario y a la falta de preparaci\u00f3n suficiente en la consulta SQL existente en el m\u00e9todo 'get_user_access()'. Esto hace posible que atacantes no autenticados a\u00f1adan consultas SQL adicionales a consultas ya existentes que pueden usarse para extraer informaci\u00f3n sensible de la base de datos."}], "id": "CVE-2026-2468", "lastModified": "2026-06-17T10:31:06.983", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "security@wordfence.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-2468", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-03-23T17:07:11.480357Z", "version": "2.0.3"}}]}, "published": "2026-03-21T04:17:02.577", "references": [{"source": "security@wordfence.com", "url": "https://plugins.trac.wordpress.org/browser/quentn-wp/tags/1.2.12/includes/class-quentn-wp-restrict-access.php#L483"}, {"source": "security@wordfence.com", "url": "https://plugins.trac.wordpress.org/browser/quentn-wp/trunk/includes/class-quentn-wp-restrict-access.php#L483"}, {"source": "security@wordfence.com", "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/653e20ae-f018-41b5-a973-f73fddae70e5?source=cve"}], "sourceIdentifier": "security@wordfence.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-89"}], "source": "security@wordfence.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,1.2.12]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "Quentn WP", "source": "cna", "vendor": "quentn"}, "product": "quentn_wp", "vendor": "quentn"}, {"configurations": [{"platform": null, "status": "unaffected", "versions": null}], "enrichment": {"confidence": 80.0, "confidence_source": "inferred", "scores": [{"score": 80.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "product": "wordpress", "vendor": "wordpress"}], "analysis": {"en": {"generated_at": "2026-03-21T07:19:07.603627+00:00", "value": {"mitigation_remediation": ["Upgrade the Quentn WP plugin to the latest version (higher than 1.2.12).", "If an upgrade is not available, uninstall or disable the plugin to remove the vulnerable code."], "summary": {"action": "Immediate Patch", "impact": "Data Breach"}, "threat_synthesis": {"affected_systems": "WordPress sites with Quentn WP plugin version 1.2.12 or earlier are affected, as the flaw exists in all releases up to and including that version.", "description_and_impact": "The Quentn WP plugin is vulnerable to SQL injection through the unescaped 'qntn_wp_access' cookie, allowing unauthenticated attackers to append malicious SQL to existing queries and retrieve sensitive database information such as user credentials and site content.", "risk_and_exploitability": "The CVSS score of 7.5 indicates high severity, and the vulnerability can be exploited without authentication, making any vulnerable system with a functioning database a target. The EPSS score is not available, and the vulnerability is not listed in CISA\u2019s KEV catalog, suggesting no confirmed exploitation at present. The attack vector is inferred to be HTTP based, via cookie manipulation, which is the most direct way to supply the malicious input."}}}}, "created": "2026-03-23T09:50:34.600598+00:00", "updated": "2026-03-25T14:42:07.640284+00:00", "vendors": ["quentn", "quentn$PRODUCT$quentn_wp", "wordpress", "wordpress$PRODUCT$wordpress"]}