Quentn WP
Quentn WP has 4 disclosed vulnerabilities in the WordSec catalog, reported between 2025 and 2026; all 4 are fixed as of September 2026. Their average CVSS score is 7.4, and the most serious one scores 9.8 out of 10. Severity breakdown: 1 critical and 2 high. 2026 was the busiest year with 2 disclosures.
The most common weakness is SQL Injection, behind 3 of the records (75%). Other recurring categories include Improper Privilege Management.
Every one of the 4 issues recorded for Quentn WP has a vendor fix available, so running the current release closes all known holes.
3 independent researchers contributed these findings, most of them (2) reported by Le Ngoc Anh. Quentn WP is installed on roughly 400 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.
CVE-2025-39596Quentn WP <= 1.2.8 - Unauthenticated Privilege Escalation
Read the full analysisVulnerability Records

Quentn WP
Author
Quentn.com GmbH
Quentn plugin allows you to restrict access to specific pages, create custom access links and create dynamic page countdowns. Optionally, you can connect your Quentn account to your WordPress installation to share contacts and manage access restrictions through Quentn. The Quentn WordPress plugin offers a variety of functions: Membership With the creation of access-restricted pages, only selected contacts will get access to the landing page – this creates exclusivity. For these contacts, for example, selected offers can be offered, webinars or downloads can be made available – this exclusivity strengthens customer loyalty Personalization By using placeholders, you can address contacts by name. Even unknown contacts can be addressed individually (but not by name) Countdown The various countdown options can contribute to lead generation and increase the conversion rate Integration and tagging in Quentn Quentn contacts can easily be sent to your WordPress page via a link. WordPress users (e.g. forum members, employees, etc.) can also be sent and tagged in Quentn – without having to rely on third-party providers such as Zapier Elementor Integration If you are using Elementor Pro, You can send contacts from Elementor forms to your Quentn account. You can apply tags and can easily map Elementor form fields to contact fields in the Quentn. LearnDash Integration You can set default courses for all user roles which will be assigned when user gets that role. For more info, vist the Quentn WordPress plugin Documentation.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C