https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-13T08:27:40.526592+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-12512 CVE-2026-12512 — Quotes Llama < 3.1.6 - Unauthenticated SQL Injection via sc Parameter 2026-10-13T08:27:40.541791+00:00

Affected: Unknown Quotes llama

The Quotes llama WordPress plugin before 3.1.6 does not properly sanitize and escape a user-supplied parameter before using it in a SQL query, allowing unauthenticated attackers to perform UNION-based SQL injection and read arbitrary data from the database, including password hashes.