WordPress Product Question and Answer plugin <= 1.1.0 - Unauthenticated SQL Injection vulnerability

Unauthenticated SQL Injection vulnerability discovered by Theo Antônio Da Fonseca in WordPress Plugin Product Question and Answer versions = 1.1.0...

CVE-2026-87771

The Product Question and Answer WordPress plugin through 1.1.0 does not sanitize and escape parameters before using them in SQL queries on AJAX actions available to unauthenticated users, allowing unauthenticated attackers to perform SQL injection attacks and extract sensitive data from the...

CVE-2026-87771 Product Question and Answer <= 1.1.0 - Unauthenticated SQL Injection via p_id and read

The Product Question and Answer WordPress plugin through 1.1.0 does not sanitize and escape parameters before using them in SQL queries on AJAX actions available to unauthenticated users, allowing unauthenticated attackers to perform SQL injection attacks and extract sensitive data from the...

CVE-2026-87771 Product Question and Answer <= 1.1.0 - Unauthenticated SQL Injection via p_id and read

The Product Question and Answer WordPress plugin through 1.1.0 does not sanitize and escape parameters before using them in SQL queries on AJAX actions available to unauthenticated users, allowing unauthenticated attackers to perform SQL injection attacks and extract sensitive data from the...

CVE-2026-87771

The Product Question and Answer WordPress plugin, in versions through 1.1.0 , is vulnerable to unauthenticated SQL injection . The root cause is a failure to sanitize and escape parameters before using them in SQL queries on AJAX actions accessible to unauthenticated users. An attacker can exploi...

PT-2026-95244

Name of the Vulnerable Software and Affected Versions Product Question and Answer versions prior to 1.1.1 Description The Product Question and Answer WordPress plugin fails to sanitize and escape parameters used in SQL queries during AJAX actions accessible to unauthenticated users. This allows a...