WordPress plugin
PickPlugins Question Answer security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical0
- High2
- Medium2
- Low0
All PickPlugins Question Answer vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High7.5 | Unauthenticated SQL Injection via 'id' Parameter ≤1.2.73No patch available | CVE-2026-10207 | |
| High8.8 | Authenticated (Subscriber+) PHP Object Injection ≤1.2.70No patch available | CVE-2025-32647 | |
| Medium6.1 | Reflected Cross-Site Scripting ≤1.2.70Update to 1.2.71 | CVE-2025-32646 | |
| Medium5.3 | Missing Authorization ≤1.2.70No patch available | CVE-2025-31810 |
- High7.5Unauthenticated SQL Injection via 'id' Parameter
≤1.2.73No patch available
- High8.8Authenticated (Subscriber+) PHP Object Injection
≤1.2.70No patch available
- Medium6.1Reflected Cross-Site Scripting
≤1.2.70Update to 1.2.71
- Medium5.3Missing Authorization
≤1.2.70No patch available
PickPlugins Question Answer: common questions
Does PickPlugins Question Answer have known vulnerabilities?
Yes. VulnCrest Radar lists 4 known vulnerabilities in PickPlugins Question Answer: 2 high, 2 medium. At least one is not fixed in the latest version.
How do I check which version of PickPlugins Question Answer I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent PickPlugins Question Answer vulnerability?
CVE-2026-10207, published Jul 27, 2026: PickPlugins Question Answer <= 1.2.73 - Unauthenticated SQL Injection via 'id' Parameter. Severity: High (CVSS 7.5).
Is any PickPlugins Question Answer vulnerability listed in CISA KEV?
No. None of the known PickPlugins Question Answer vulnerabilities is currently listed in the CISA KEV catalog.