WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
qtranslate
Published
2014-08-01
Title
qTranslate 2.5.34 - Setting Manipulation CSRF
Slug
qtranslate
Published
2015-07-29
Title
qTranslate <= 2.5.39 - Cross-Site Scripting (XSS)
Slug
qtranslate-slug
Published
2021-06-08
Title
CSRF Bypass in Multiple Plugins
Slug
qtranslate-slug
Published
2021-06-08
Title
Qtranslate Slug <= 1.1.18 - Cross-Site Request Forgery
Slug
qtranslate-x
Published
2015-08-21
Title
qTranslate X <= 3.4.3 - Authenticated Reflected Cross-Site Scripting (XSS)
Slug
qtranslate-x
Published
2021-08-31
Title
qTranslate X <= 3.4.6.8 - Multiple Admin+ Stored Cross-Site Scripting
Slug
quadmenu
Published
2021-02-22
Title
QuadMenu < 2.0.7 - Unauthenticated RCE via compiler_save
Slug
quadmenu
Published
2025-04-11
Title
WordPress Mega Menu – QuadMenu < 3.2.1 - Cross-Site Request Forgery to Limited User Meta Update
Slug
quantities-and-units-for-woocommerce
Published
2025-09-17
Title
Quantities and Units for WooCommerce <= 1.0.13 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
quartz
Published
2014-09-27
Title
Quartz Plugin 1.01.1 - SQL Injection
Slug
quasar-form
Published
2023-07-24
Title
Quasar form <= 6.1 - Subscriber+ SQLi
Slug
qubely
Published
2021-12-27
Title
Qubely < 1.7.8 - Subscriber+ Arbitrary Post Deletion
Slug
qubely
Published
2022-06-06
Title
Qubely < 1.8.1 - Authenticated Arbitrary Settings Update
Slug
qubely
Published
2023-01-02
Title
Qubely < 1.8.5 - Contributor+ Stored XSS
Slug
qubely
Published
2023-07-17
Title
Qubely < 1.8.6 - Unauthenticated Arbitrary E-mail Sending
Slug
qubely
Published
2025-02-13
Title
Qubely – Advanced Gutenberg Blocks < 1.8.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'align' and 'UniqueID'
Slug
qubely
Published
2025-03-10
Title
Qubely < 1.8.14 - Contributor+ Sensitive Information Exposure
Slug
qubely
Published
2025-09-22
Title
Qubely <= 1.8.14 - Missing Authorization
Slug
qubely
Published
2025-09-22
Title
Qubely <= 1.8.14 - Authenticated (Contributor+) Sensitive Information Exposure
Slug
qubely
Published
2026-02-14
Title
Qubely <= 1.8.14 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
qubely
Published
2026-07-23
Title
Qubely – Advanced Gutenberg Blocks <= 1.8.14 - Missing Authorization
Slug
qubotchat
Published
2023-05-22
Title
qubotchat < 1.1.6 - Unauthenticated Stored XSS
Slug
qubotchat
Published
2023-05-22
Title
Qubotchat < 1.1.6 – Admin+ Stored XSS
Slug
quentn-wp
Published
2025-04-17
Title
Quentn WP < 1.2.9 - Unauthenticated SQL Injection
Slug
quentn-wp
Published
2025-04-17
Title
Quentn WP < 1.2.9 - Unauthenticated Privilege Escalation