WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
quotes-and-tips
Published
2024-06-21
Title
Quotes and Tips < 1.45 - Admin+ Arbitrary File Upload
Slug
quotes-collection
Published
2016-11-08
Title
Quotes Collection <= 2.0.5 - Reflected Cross-Site Scripting (XSS)
Slug
quotes-collection
Published
2021-11-15
Title
Quotes Collection <= 2.5.2 - Admin+ SQL Injection
Slug
quotes-for-woocommerce
Published
2023-11-30
Title
Quotes for WooCommerce < 2.0.2 - Missing Authorization
Slug
quotes-for-woocommerce
Published
2023-11-30
Title
Quotes for WooCommerce < 2.0.2 - Quote Status Update / Quote Sending via CSRF
Slug
quotes-llama
Published
2022-05-10
Title
Quotes llama < 1.0.0 - Admin+ Stored Cross-Site Scripting
Slug
quotes-llama
Published
2024-11-22
Title
Quotes llama < 3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
quotes-llama
Published
2025-02-24
Title
Quotes llama < 3.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
quotes-llama
Published
2025-03-27
Title
Quotes llama < 3.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
quran-gateway
Published
2025-12-19
Title
Quran Gateway <= 1.5 - Cross-Site Request Forgery to Settings Update
Slug
quran-live
Published
2026-04-21
Title
Quran Live Multilanguage <= 1.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Slug
quran-phrases-about-most-people-shortcodes
Published
2024-12-11
Title
Quran Phrases About Most People Shortcodes < 1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
quran-shortcode
Published
2024-10-31
Title
Quran Shortcode <= 1.5 - Authenticated (Contributor+) SQL Injection
Slug
quran-text-multilanguage
Published
2024-12-09
Title
Quran multilanguage Text & Audio < 2.3.22 - Reflected Cross-Site Scripting via sourate and lang Parameters
Slug
quran-text-multilanguage
Published
2025-05-07
Title
Quran multilanguage Text & Audio < 2.3.24 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
quran-translations-by-edc
Published
2026-04-07
Title
Quran Translations <= 1.7 - Cross-Site Request Forgery to Playlist Settings Form
Slug
quttera-web-malware-scanner
Published
2023-11-21
Title
Quttera Web Malware Scanner < 3.4.2.1 - Admin+ Path Traversal
Slug
quttera-web-malware-scanner
Published
2023-11-21
Title
Quttera Web Malware Scanner < 3.4.2.1 - Directory Listing to Sensitive Data Exposure
Slug
quttera-web-malware-scanner
Published
2025-08-14
Title
Quttera Web Malware Scanner < 3.5.2.1 - Authenticated (Administrator+) Server-Side Request Forgery
Slug
qwiz-online-quizzes-and-flashcards
Published
2019-09-07
Title
Qwiz Online Quizzes And Flashcards <= 3.36 - Unauthenticated Reflected Cross Site Scripting
Slug
qwiz-online-quizzes-and-flashcards
Published
2021-10-11
Title
Qwizcards < 3.62 - Admin+ Stored Cross Site Scripting
Slug
qwiz-online-quizzes-and-flashcards
Published
2025-07-02
Title
WordPress Qwizcards < 3.95 - Reflected XSS
Slug
qyrr-code
Published
2021-07-26
Title
Qyrr < 0.7 - Authenticated (contributor+) Stored XSS
Slug
qyrr-code
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
qyrr-code
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting