{"id":"CVE-2026-12512","aliases":["EUVD-2026-44595","GHSA-ggv5-9w8q-wh8j"],"status":"published","title":"Quotes Llama \u003c 3.1.6 - Unauthenticated SQL Injection via sc Parameter","description":"The Quotes llama WordPress plugin before 3.1.6 does not properly sanitize and escape a user-supplied parameter before using it in a SQL query, allowing unauthenticated attackers to perform UNION-based SQL injection and read arbitrary data from the database, including password hashes.","severity":{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","level":"high","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-12","score":0.00445,"percentile":0.39182,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-89"],"published":"2026-07-15T06:00:02Z","modified":"2026-07-15T19:50:11Z","products":[{"vendor":"oooorgle","product":"quotes llama"},{"vendor":"unknown","product":"quotes llama"}],"references":[{"url":"https://wpscan.com/vulnerability/39d038f6-f009-4274-a8a7-9d7c2597ec85/","tags":["exploit","vdb-entry","technical-description"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-12512"},{"url":"https://wpscan.com/vulnerability/39d038f6-f009-4274-a8a7-9d7c2597ec85"},{"url":"https://github.com/advisories/GHSA-ggv5-9w8q-wh8j"}],"sources":{"cve":[{"id":"CVE-2026-12512","title":"Quotes Llama \u003c 3.1.6 - Unauthenticated SQL Injection via sc Parameter","description":"The Quotes llama WordPress plugin before 3.1.6 does not properly sanitize and escape a user-supplied parameter before using it in a SQL query, allowing unauthenticated attackers to perform UNION-based SQL injection and read arbitrary data from the database, including password hashes.","status":"published","published":"2026-07-15T06:00:02.636Z","modified":"2026-07-15T10:29:07.096Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","level":"high","assessor":"adp"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:19:48.461833Z"}],"euvd":[{"id":"EUVD-2026-44595","description":"The Quotes llama WordPress plugin before 3.1.6 does not properly sanitize and escape a user-supplied parameter before using it in a SQL query, allowing unauthenticated attackers to perform UNION-based SQL injection and read arbitrary data from the database, including password hashes.","status":"published","published":"2026-07-15T06:00:02Z","modified":"2026-07-15T10:29:07Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T18:19:53.678292Z"}],"ghsa":[{"id":"GHSA-ggv5-9w8q-wh8j","title":"The Quotes llama WordPress plugin before 3.1.6 does not properly sanitize and escape a user...","description":"The Quotes llama WordPress plugin before 3.1.6 does not properly sanitize and escape a user-supplied parameter before using it in a SQL query, allowing unauthenticated attackers to perform UNION-based SQL injection and read arbitrary data from the database, including password hashes.","status":"published","published":"2026-07-15T06:31:46Z","modified":"2026-07-15T12:32:01Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T15:09:32.601666Z"}],"nvd":[{"id":"CVE-2026-12512","description":"The Quotes llama WordPress plugin before 3.1.6 does not properly sanitize and escape a user-supplied parameter before using it in a SQL query, allowing unauthenticated attackers to perform UNION-based SQL injection and read arbitrary data from the database, including password hashes.","status":"published","published":"2026-07-15T06:16:44.757Z","modified":"2026-07-15T19:50:11.367Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","level":"high","assessor":"secondary"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:12:29.879716Z"}]}}