Quentn WP SQL Injection Vulnerability via 'qntn_wp_access' Cookie
Vulnerability
A SQL injection vulnerability has been identified in the Quentn WP plugin for WordPress, affecting all versions through 1.2.12. The issue arises in the 'get_user_access()' method, where insufficient escaping of user-supplied data in the 'qntn_wp_access' cookie allows unauthenticated attackers to inject additional SQL queries. This exploitation could lead to unauthorized access to sensitive information in the database.
Impact
Exploitation of this vulnerability allows for SQL injection, where an attacker can manipulate SQL queries to extract sensitive data from the database.
Remediation
No patch is currently available. Users are advised to review the vulnerability details and consider uninstalling the affected plugin.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.