{"vulnerability": "CVE-2026-89287", "sightings": [{"uuid": "90397a75-949b-43d9-b1ea-892df53ec5b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89287", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117420983524966549", "content": "CVE-2026-89287 ASPL Product Quotation <= 1.1.0 - Unauthenticated SQLi via 'quote_id' Parameter The ASPL Product Quotation WordPress plugin through 1.1.0 does not sanitize and escape a parameter before using it in SQL statements, allowing unauthenticated attackers to perform SQL injection and read arbitrary data from the database.\nhttps://www.cve.org/CVERecord?id=CVE-2026-89287https://wpscan.com/vulnerability/9194818b-75c8-40f0-baba-6dc84d2cfe7d/#CVE_2026_89287#bot", "creation_timestamp": "2026-10-11T07:00:19.737127Z"}]}