WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
qi-blocks
Published
2024-07-11
Title
Qi Blocks < 1.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
qi-blocks
Published
2024-10-21
Title
Qi Blocks < 1.3.3 - Authenticated (Contributor+) Local File Inclusion
Slug
qi-blocks
Published
2025-04-28
Title
Qi Blocks < 1.4 - Contributor+ Stored XSS via Counter Block
Slug
qi-blocks
Published
2025-04-28
Title
Qi Blocks < 1.4 - Contributor+ Stored XSS via ToC Block
Slug
qi-blocks
Published
2025-04-28
Title
Qi Blocks < 1.4 - Contributor+ Stored XSS vi Countdown Block
Slug
qi-blocks
Published
2025-10-31
Title
Qi Blocks < 1.4.4 - Missing Authorization to Authenticated (Contributor+) Plugin Settings Update
Slug
qi-blocks
Published
2025-11-14
Title
Qi Blocks < 1.4.4 - Missing Authorization to Arbitrary Attachment Resize
Slug
qi-blocks
Published
2025-08-11
Title
Qi Blocks < 1.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
ql-cost-calculator
Published
2025-07-16
Title
Cost Calculator < 7.5 - Missing Authorization
Slug
ql-cost-calculator
Published
2025-08-06
Title
Cost Calculator < 7.5 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
qmean
Published
2025-01-16
Title
QMean – WordPress Did You Mean and Search Suggestion Like Google <= 2.0 - Reflected Cross-Site Scripting
Slug
qnotsquiz
Published
2025-10-23
Title
qnotsquiz <= 1.0.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
qode-essential-addons
Published
2023-11-27
Title
Qode Essential Addons < 1.5.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation/Activation
Slug
qode-essential-addons
Published
2024-10-24
Title
Qode Essential Addons < 1.6.4 - Authenticated (Contributor+) Local File Inclusion
Slug
qode-instagram-widget
Published
2019-10-21
Title
Bridge Theme < 18.2.1 - Open Redirect
Slug
qode-twitter-feed
Published
2019-10-21
Title
Bridge Theme < 18.2.1 - Open Redirect
Slug
qode-wishlist-for-woocommerce
Published
2025-11-26
Title
QODE Wishlist for WooCommerce < 1.2.8 - Unauthenticated Insecure Direct Object Reference to Wishlist Update
Slug
qodeblock
Published
2024-07-11
Title
Plum: Spin Wheel & Email Pop-up <= 2.0 - Missing Authorization
Slug
qodeblock
Published
2024-07-11
Title
Plum: Spin Wheel & Email Pop-up <= 2.0 - Missing Authorization to Unauthenticated Stored Cross-Site Scripting
Slug
qqworld-auto-save-images
Published
2024-05-31
Title
QQWorld Auto Save Images <= 1.9.8 - Missing Authorization to Arbitrary Post Content Retrieval
Slug
qr-code-and-barcode-scanner-reader
Published
2025-01-07
Title
Qr Code and Barcode Scanner Reader <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
qr-code-composer
Published
2024-04-16
Title
QR Code Composer < 2.0.4 - Subscriber+ Stored XSS
Slug
qr-code-tag
Published
2023-11-06
Title
QR Code Tag <= 1.0 - Contributor+ Stored XSS
Slug
qr-code-tag-for-wc-from-goaskle-com
Published
2025-04-04
Title
QR Code Tag for WC order emails <= 1.9.42 - Cross-Site Request Forgery
Slug
qr-code-tag-for-wc-from-goaskle-com
Published
2026-01-06
Title
QR Code for WooCommerce order emails, PDF invoices, packing slips <= 1.9.42 - Authenticated (Contributor+) Cross-Site Scripting via Shortcode Attributes