WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
quotes-llama
Published
2026-06-24
Title
Quotes Llama < 3.1.6 - Unauthenticated SQL Injection via sc Parameter
Slug
quotes-llama
Published
2026-06-25
Title
Quotes llama < 3.1.6 - Unauthenticated SQL Injection
Slug
quran-gateway
Published
2025-12-19
Title
Quran Gateway <= 1.5 - Cross-Site Request Forgery to Settings Update
Slug
quran-live
Published
2026-04-21
Title
Quran Live Multilanguage <= 1.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Slug
quran-phrases-about-most-people-shortcodes
Published
2024-12-11
Title
Quran Phrases About Most People Shortcodes < 1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
quran-shortcode
Published
2024-10-31
Title
Quran Shortcode <= 1.5 - Authenticated (Contributor+) SQL Injection
Slug
quran-text-multilanguage
Published
2024-12-09
Title
Quran multilanguage Text & Audio < 2.3.22 - Reflected Cross-Site Scripting via sourate and lang Parameters
Slug
quran-text-multilanguage
Published
2025-05-07
Title
Quran multilanguage Text & Audio < 2.3.24 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
quran-translations-by-edc
Published
2026-04-07
Title
Quran Translations <= 1.7 - Cross-Site Request Forgery to Playlist Settings Form
Slug
quttera-web-malware-scanner
Published
2023-11-21
Title
Quttera Web Malware Scanner < 3.4.2.1 - Admin+ Path Traversal
Slug
quttera-web-malware-scanner
Published
2023-11-21
Title
Quttera Web Malware Scanner < 3.4.2.1 - Directory Listing to Sensitive Data Exposure
Slug
quttera-web-malware-scanner
Published
2025-08-14
Title
Quttera Web Malware Scanner < 3.5.2.1 - Authenticated (Administrator+) Server-Side Request Forgery
Slug
qwiz-online-quizzes-and-flashcards
Published
2019-09-07
Title
Qwiz Online Quizzes And Flashcards <= 3.36 - Unauthenticated Reflected Cross Site Scripting
Slug
qwiz-online-quizzes-and-flashcards
Published
2021-10-11
Title
Qwizcards < 3.62 - Admin+ Stored Cross Site Scripting
Slug
qwiz-online-quizzes-and-flashcards
Published
2025-07-02
Title
WordPress Qwizcards < 3.95 - Reflected XSS
Slug
qyrr-code
Published
2021-07-26
Title
Qyrr < 0.7 - Authenticated (contributor+) Stored XSS
Slug
qyrr-code
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
qyrr-code
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
qyrr-code
Published
2025-09-29
Title
Qyrr – simply and modern QR-Code creation < 2.0.8 - Authenticated (Contributor+) Arbitrary File Upload
Slug
qzzr-shortcode
Published
2025-10-30
Title
Qzzr Shortcode Plugin <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode