{"id":"CVE-2026-14962","title":"The ELEX WooCommerce Request a Quote WordPress plugin before 2.4.1 does not properly sanitise and escape a parameter before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks and extract arbitrary da…","summary":"The ELEX WooCommerce Request a Quote WordPress plugin before 2.4.1 does not properly sanitise and escape a parameter before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks and extract arbitrary da…","severity":"high","cvss":8.6,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","cwe":["CWE-89"],"product":"ELEX WooCommerce Request a Quote","affected":["elex_woocommerce_request_a_quote < 2.4.1"],"published":"2026-09-09","updated":"2026-09-09","sourceUpdated":"2026-09-09T16:17:00.967","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-14962","references":[{"url":"https://wpscan.com/vulnerability/854a0756-ff87-4a65-959a-2e051a302a12/","label":"contact@wpscan.com"}],"tags":["nvd","cve.org","exploit-available"],"ssvc":{"exploitation":"none","automatable":"yes","technicalImpact":"partial","timestamp":"2026-09-09T15:35:05.123977Z"},"epss":0.00324,"epssPercentile":0.25724,"ingestedAt":"2026-09-09T07:03:03.587Z","exploits":{"github":1,"githubRepos":["https://github.com/cflowsec/CVE-2026-14962"],"checkedAt":"2026-09-23T07:13:48.718Z"},"exploitAvailable":true,"slug":"CVE-2026-14962","body":"## Overview\n\nThe ELEX WooCommerce Request a Quote WordPress plugin before 2.4.1 does not properly sanitise and escape a parameter before using it in a SQL query, allowing unauthenticated users to perform SQL injection attacks and extract arbitrary data from the database.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"midnight","depthScore":59,"depthScoreParts":{"impact":47.3,"likelihood":0.1,"exploitation":12,"ransomware":0},"changes":[{"seq":19648,"id":"CVE-2026-14962","ts":1788970490282,"field":"cvss","old":null,"new":"8.6"},{"seq":19647,"id":"CVE-2026-14962","ts":1788970490282,"field":"severity","old":"none","new":"high"}]}