What is GHSA-rjgv-8pq9-p3c3?

GHSA-rjgv-8pq9-p3c3 is a security advisory published by GitHub Security Advisories with High severity. The Product Question and Answer WordPress plugin through 1.1.0 does not sanitize and escape...

Which CVE IDs does GHSA-rjgv-8pq9-p3c3 cover?

GHSA-rjgv-8pq9-p3c3 covers the following CVE IDs: CVE-2026-87771. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-rjgv-8pq9-p3c3?

GHSA-rjgv-8pq9-p3c3 has a CVSS v3 base score of 8.6, published by GitHub Security Advisories.

GHSA-rjgv-8pq9-p3c3HighCVSS 8.6

The Product Question and Answer WordPress plugin through 1.1.0 does not sanitize and escape...

Vendor

GitHub Security Advisories

Published

September 18, 2026

Last Modified

September 18, 2026

🔗 CVE IDs covered (1)

CVE-2026-87771 →

📋 Description

The Product Question and Answer WordPress plugin through 1.1.0 does not sanitize and escape parameters before using them in SQL queries on AJAX actions available to unauthenticated users, allowing unauthenticated attackers to perform SQL injection attacks and extract sensitive data from the database.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-87771
https://wpscan.com/vulnerability/d71642f0-431c-42fc-bf3f-2b7b3c4e3954
https://github.com/advisories/GHSA-rjgv-8pq9-p3c3