The Answer My Question 1.3 WordPress plugin contains a classic SQL injection flaw that permits an unauthenticated attacker to send a crafted 'id' value in a POST request to modal.php. The plugin concatenates this value directly into an SQL statement, allowing arbitrary SQL commands to be executed against the WordPress database. This is a textbook example of CWE‑89 where unsanitized user input interacts with database operations.

The affected product is the Answer My Question plugin developed by mattkaye. The vulnerability is documented for version 1.3 of the plugin. Any installation of this plugin that has not been updated to a fixed release may be impacted.

The CVSS score of 8.8 indicates high severity, and the EPSS score of less than 1% suggests a low but nonzero probability of exploitation. The flaw accepts unauthenticated HTTP POST input to modal.php, so any visitor to the site could trigger the exploit. Attackers could execute arbitrary SQL queries and obtain sensitive database information such as WordPress terms and configuration data. Because the vulnerability is not listed in the CISA KEV catalog, no official exploit has been documented, but the high severity and low authentication requirement make it a significant risk to affected sites.