CVE-2026-12512

The Quotes llama WordPress plugin, in versions prior to 3.1.6 , is vulnerable to an unauthenticated SQL injection . The root cause is the improper sanitization and escaping of a user-supplied parameter (specifically the sc parameter ) before it is used in a SQL query. This flaw allows attackers t...