Product Question And Answer
Monthly
Unauthenticated SQL injection in the WordPress plugin 'Product Question and Answer' (versions through 1.1.0) lets remote attackers inject arbitrary SQL through AJAX actions that are explicitly exposed to logged-out users, enabling exfiltration of sensitive database contents such as user credential hashes and other site data. The flaw requires no authentication, no user interaction, and no non-default configuration - only that the plugin is installed and active - and publicly available exploit code exists via the WPScan proof-of-concept, so the exploitation barrier is low; there is no indication of confirmed active exploitation (no CISA KEV listing). Our independent assessment rates this CVSS 3.1 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N), slightly below the 8.6 feed score which assumes a scope change; the practical risk driver is the confidentiality-only, full-database read impact combined with trivial remote reachability.
Unauthenticated SQL injection in the WordPress plugin 'Product Question and Answer' (versions through 1.1.0) lets remote attackers inject arbitrary SQL through AJAX actions that are explicitly exposed to logged-out users, enabling exfiltration of sensitive database contents such as user credential hashes and other site data. The flaw requires no authentication, no user interaction, and no non-default configuration - only that the plugin is installed and active - and publicly available exploit code exists via the WPScan proof-of-concept, so the exploitation barrier is low; there is no indication of confirmed active exploitation (no CISA KEV listing). Our independent assessment rates this CVSS 3.1 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N), slightly below the 8.6 feed score which assumes a scope change; the practical risk driver is the confidentiality-only, full-database read impact combined with trivial remote reachability.