Quentn WP <= 1.2.8 is vulnerable to Privilege Escalation Vulnerability

Unauthenticated

Published
2025-04-16

The Quentn WP plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.2.8. This makes it possible for unauthenticated attackers to elevate their privileges to that of an administrator.

CVE

https://www.cve.org/CVERecord?id=CVE-2025-39596

CVSS

Score:9.8

Severity:Critical

Version: 1.2.8

There is a patch available in v1.2.9 and we strongly recommend you update to this version as soon as possible.