WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
quickcal
Published
2025-05-16
Title
QuickCal < 1.0.16 - Cross-Site Request Forgery to Privilege Escalation
Slug
quickcal
Published
2025-05-16
Title
QuickCal < 1.0.16 - Authenticated (Subscriber+) Sensitive Information Exposure
Slug
quickcreator
Published
2025-10-23
Title
Quickcreator – AI Blog Writer 0.0.9 - 0.1.17 - Unauthenticated API Key Exposure
Slug
quickiebar
Published
2024-05-06
Title
QuickieBar <= 1.8.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
quicksand-jquery-post-filter
Published
2024-02-02
Title
Quicksand Post Filter jQuery Plugin <= 3.1.1 - Cross-Site Request Forgery via renderAdmin
Slug
quicksand-jquery-post-filter
Published
2024-02-02
Title
Quicksand Post Filter jQuery Plugin <= 3.1.1 - Missing Authorization via quicksand_admin_ajax
Slug
quickswish
Published
2023-02-28
Title
QuickSwish < 1.1.0 - Arbitrary Plugin Activation via CSRF
Slug
quickwebp
Published
2026-05-20
Title
QuickWebP – Compress / Optimize Images & Convert WebP | SEO Friendly < 3.2.8 - Authenticated (Contributor+) Arbitrary File Deletion
Slug
quicq
Published
2025-11-12
Title
Convert WebP & AVIF | Quicq | Best image optimizer and compression plugin | Improve your Google Pagespeed <= 2.0.0 - Missing Authorization to Authenticated (Subscriber+) Afosto Disconnect
Slug
quietly-insights
Published
2024-12-11
Title
Quietly Insights <= 1.2.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update
Slug
quillforms
Published
2023-10-24
Title
Quill Forms < 3.4.0 - Cross-Site Request Forgery
Slug
quillforms
Published
2024-09-30
Title
Quill Forms < 3.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
quillforms
Published
2025-01-06
Title
Quill Forms | The Best Typeform Alternative | Create Conversational Multi Step Form, Survey, Quiz, Cost Estimation or Donation Form on WordPress < 4.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
quiz-cat
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
quiz-cat
Published
2025-03-27
Title
Quiz Cat < 3.0.9 - Missing Authorization
Slug
quiz-expert
Published
2023-06-27
Title
Quiz Expert – Easy Quiz Maker, Exam and Test Manager <= 1.5.0 - Cross-Site Request Forgery
Slug
quiz-maker
Published
2021-06-29
Title
Quiz Maker < 6.2.0.9 - Multiple Authenticated Blind SQL Injections
Slug
quiz-maker
Published
2023-05-15
Title
Quiz Maker < 6.4.2.7 - Reflected XSS
Slug
quiz-maker
Published
2023-11-30
Title
Quiz Maker < 6.4.9.5 - Unauthenticated Email Address Disclosure
Slug
quiz-maker
Published
2023-11-30
Title
Quiz Maker < 6.4.9.5 - Reflected Cross-Site Scripting
Slug
quiz-maker
Published
2024-01-05
Title
Quiz Maker < 6.5.1.2 - Missing Authorization
Slug
quiz-maker
Published
2024-01-12
Title
Quiz Maker < 6.5.0.6 - Denial of Service
Slug
quiz-maker
Published
2024-02-06
Title
Quiz Maker < 6.5.2.5 - Missing Authorization to Unauthenticated Quiz Data Retrieval
Slug
quiz-maker
Published
2024-02-06
Title
Quiz Maker < 6.5.2.5 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Quiz Creation & Modification
Slug
quiz-maker
Published
2024-06-24
Title
Quiz Maker < 6.5.8.4 - Unauthenticated SQL Injection via 'ays_questions' Parameter