CVE-2016-20073

CVE Database · CVE-2016-20073

CVE-2016-20073

· HIGHReceived

CVSS v3.1

8.2

CVSS v4.0

8.8

EPSS

0.27%

Published

Jun 15, 2026

Modified

Jun 15, 2026

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Answer My Question 1.3 plugin for WordPress contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'id' POST parameter. Attackers can submit crafted SQL statements to the modal.php endpoint to extract sensitive database information including WordPress terms and configuration data.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

Weaknesses (CWE)

CWE-89

References (4)

http://lenonleite.com.br/

https://wordpress.org/plugins/answer-my-question/

https://www.exploit-db.com/exploits/40771

https://www.vulncheck.com/advisories/answer-my-question-plugin-wordpress-sql-injection-via-modal-php

KEV Catalog EPSS Scores Vendors All CVEs