Skip to content
CVE PROGRAM SOURCE RECORD8.6 High

CVE-2026-89214

WpCues Basic Quiz <= 1.6.5 - Unauthenticated SQLi via Quiz Result Submission

Description

The WpCues Basic Quiz WordPress plugin through 1.6.5 does not properly sanitise and escape values before using them in a SQL statement, which allows unauthenticated attackers to perform SQL injection attacks and read data from the database.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown WpCues Basic Quiz

Default version status: unknown

  • 0 to ≤ 1.6.5affected

References