2 matches found
CVE-2026-89287
The ASPL Product Quotation WordPress plugin through 1.1.0 does not sanitize and escape a parameter before using it in SQL statements, allowing unauthenticated attackers to perform SQL injection and read arbitrary data from the database...
8.6CVSS0.0033EPSS
SaveExploits0References1
EUVD-2026-96787
The ASPL Product Quotation WordPress plugin through 1.1.0 does not sanitize and escape a parameter before using it in SQL statements, allowing unauthenticated attackers to perform SQL injection and read arbitrary data from the database...
8.6CVSS6.1AI score0.0033EPSS
SaveExploits0References1
20