Unauthenticated SQL Injection in PickPlugins Question Answer WordPress Plugin (CVE-2026-10207)

www.wordfence.com 2026-07-28查看中文 →

Security AdvisoryCVE-2026-10207HighPickPlugins

Affected:

PickPlugins Question Answer <= 1.2.73

Referenced CVEs: CVE-2026-10207 · 7.5

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from www.wordfence.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

Realtyna WPL Real Estate <= 5.3.0 Authenticated Arbitrary File Upload (CVE-2026-16236) 2026-08-02 CubeWP Framework <= 1.1.30 Unauthenticated Arbitrary File Read via prev_icon/next_icon 2026-08-02 User Access Manager <= 2.3.15 Unauthenticated Arbitrary File Read via Directory Traversal (CVE-2026-18352) 2026-08-02 WordPress Database Collation Fix <=1.2.10 Unauthenticated SQL Injection (CVE-2026-15018) 2026-08-02 GamiPress <=7.9.9.1 Authenticated Stored XSS via Shortcode (CVE-2026-16090) 2026-08-02

Offline Archive

Offline screenshot & PDF are Pro-exclusive