Quentn WP

Quentn WP has 4 disclosed vulnerabilities in the WordSec catalog, reported between 2025 and 2026; all 4 are fixed as of September 2026. Their average CVSS score is 7.4, and the most serious one scores 9.8 out of 10. Severity breakdown: 1 critical and 2 high. 2026 was the busiest year with 2 disclosures.

The most common weakness is SQL Injection, behind 3 of the records (75%). Other recurring categories include Improper Privilege Management.

Every one of the 4 issues recorded for Quentn WP has a vendor fix available, so running the current release closes all known holes.

3 independent researchers contributed these findings, most of them (2) reported by Le Ngoc Anh. Quentn WP is installed on roughly 400 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.

Strategic Overview

Avg CVSSHigh
7.4/ 10
Patch Coverage100%
Open

0

Fixed

4

Get automatic notifications for all Quentn WP vulnerabilities before they are exploited.

Highest severity on recordCVSS 9.8CVE-2025-39596

Quentn WP <= 1.2.8 - Unauthenticated Privilege Escalation

Read the full analysis

Vulnerability Records

4 records
Quentn WP banner
Latestv1.2.15
5.0(2)
100/100
Last Updated
2026-09-03 (9d ago)
Active Installs
400+
Downloads
17,099
Requires WP
4.6.0+
Requires PHP
5.6.0+
Tested up to
WP 7.0.4
Created
2020-05-20 (6y ago)

Quentn plugin allows you to restrict access to specific pages, create custom access links and create dynamic page countdowns. Optionally, you can connect your Quentn account to your WordPress installation to share contacts and manage access restrictions through Quentn. The Quentn WordPress plugin offers a variety of functions: Membership With the creation of access-restricted pages, only selected contacts will get access to the landing page – this creates exclusivity. For these contacts, for example, selected offers can be offered, webinars or downloads can be made available – this exclusivity strengthens customer loyalty Personalization By using placeholders, you can address contacts by name. Even unknown contacts can be addressed individually (but not by name) Countdown The various countdown options can contribute to lead generation and increase the conversion rate Integration and tagging in Quentn Quentn contacts can easily be sent to your WordPress page via a link. WordPress users (e.g. forum members, employees, etc.) can also be sent and tagged in Quentn – without having to rely on third-party providers such as Zapier Elementor Integration If you are using Elementor Pro, You can send contacts from Elementor forms to your Quentn account. You can apply tags and can easily map Elementor form fields to contact fields in the Quentn. LearnDash Integration You can set default courses for all user roles which will be assigned when user gets that role. For more info, vist the Quentn WordPress plugin Documentation.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C