WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
qode-real-estate
Published
2026-10-06
Title
Qode Real Estate <= 1.1.7.3 - Unauthenticated Stored Cross-Site Scripting
Slug
qode-tours
Published
2026-07-28
Title
Qode Tours <= 3.1.3.1 - Unauthenticated SQL Injection
Slug
qode-tours
Published
2026-10-07
Title
Qode Tours <= 3.1.3.2 - Authenticated (Subscriber+) SQL Injection
Slug
qode-twitter-feed
Published
2019-10-21
Title
Bridge Theme < 18.2.1 - Open Redirect
Slug
qode-wishlist-for-woocommerce
Published
2025-11-26
Title
QODE Wishlist for WooCommerce < 1.2.8 - Unauthenticated Insecure Direct Object Reference to Wishlist Update
Slug
qodeblock
Published
2024-07-11
Title
Plum: Spin Wheel & Email Pop-up <= 2.0 - Missing Authorization
Slug
qodeblock
Published
2024-07-11
Title
Plum: Spin Wheel & Email Pop-up <= 2.0 - Missing Authorization to Unauthenticated Stored Cross-Site Scripting
Slug
qqworld-auto-save-images
Published
2024-05-31
Title
QQWorld Auto Save Images <= 1.9.8 - Missing Authorization to Arbitrary Post Content Retrieval
Slug
qr-code-and-barcode-scanner-reader
Published
2025-01-07
Title
Qr Code and Barcode Scanner Reader <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
qr-code-composer
Published
2024-04-16
Title
QR Code Composer < 2.0.4 - Subscriber+ Stored XSS
Slug
qr-code-tag
Published
2023-11-06
Title
QR Code Tag <= 1.0 - Contributor+ Stored XSS
Slug
qr-code-tag-for-wc-from-goaskle-com
Published
2025-04-04
Title
QR Code Tag for WC order emails <= 1.9.42 - Cross-Site Request Forgery
Slug
qr-code-tag-for-wc-from-goaskle-com
Published
2026-01-06
Title
QR Code for WooCommerce order emails, PDF invoices, packing slips <= 1.9.42 - Authenticated (Contributor+) Cross-Site Scripting via Shortcode Attributes
Slug
qr-master
Published
2025-04-07
Title
QR Master <= 1.0.5 - Reflected Cross-Site Scripting
Slug
qr-redirector
Published
2021-10-18
Title
QR Redirector < 1.6.1 - Contributor+ Stored Cross-Site Scripting
Slug
qr-redirector
Published
2021-10-18
Title
QR Redirector < 1.6 - Subscriber+ Arbitrary QR Redirect Response Status Update
Slug
qr-redirector
Published
2026-05-25
Title
QR Redirector < 2.0.4 - Missing Authorization
Slug
qr-redirector
Published
2026-10-05
Title
QR Redirector < 2.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
qr-twitter-widget
Published
2023-10-18
Title
QR Twitter Widget <= 0.2.3 - Contributor+ Stored XSS
Slug
qrcode-login-for-weixin
Published
2026-07-06
Title
QRcode Login for WeChat <= 1.3 - Unauthenticated Account Takeover
Slug
qrcode-wprhe
Published
2025-01-16
Title
QR Code Generator <= 1.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
qrmenu-lite
Published
2024-11-18
Title
QRMenu Restaurant QR Menu Lite <= 1.0.3 - Authenticated (Contributor+) PHP Object Injection
Slug
qs-dark-mode
Published
2024-09-30
Title
QS Dark Mode Plugin < 3.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
qs-dark-mode
Published
2025-05-07
Title
QS Dark Mode <= 3.0 - Missing Authorization
Slug
qt-kentharadio
Published
2021-06-28
Title
Onair2 < 3.9.9.2 & KenthaRadio < 2.0.2 - Unauthenticated RFI and SSRF