Skip to content
OpenAdvisories

Product · PickPlugins

PickPlugins Question Answer

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-10207

    PickPlugins Question Answer <= 1.2.73 - Unauthenticated SQL Injection via 'id' Parameter

    The PickPlugins Question Answer plugin for WordPress is vulnerable to SQL Injection in versions up to and including 1.2.73. This is due to insufficient sanitization of user-supplied input via the 'id' GET parameter in the user profile template combined with t…

    PickPlugins PickPlugins Question Answer Web / CMS