CVE-2026-89287

UNKNOWN 0.0

ASPL Product Quotation <= 1.1.0 - Unauthenticated SQLi via 'quote_id' Parameter

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

The ASPL Product Quotation WordPress plugin through 1.1.0 does not sanitize and escape a parameter before using it in SQL statements, allowing unauthenticated attackers to perform SQL injection and read arbitrary data from the database.

Vendor	unknown
Product	aspl product quotation
Published	Oct 11, 2026

Stay Ahead of the Next One

Get instant alerts for unknown aspl product quotation

Be the first to know when new unknown vulnerabilities affecting unknown aspl product quotation are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Unknown / ASPL Product Quotation

0 ≤ 1.1.0

References

NVD ↗ CVE.org ↗ EPSS Data ↗

wpscan.com: https://wpscan.com/vulnerability/9194818b-75c8-40f0-baba-6dc84d2cfe7d/

Credits

João Ramos Maciel WPScan