WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
quasar-form
Published
2023-07-24
Title
Quasar form <= 6.1 - Subscriber+ SQLi
Slug
qubely
Published
2021-12-27
Title
Qubely < 1.7.8 - Subscriber+ Arbitrary Post Deletion
Slug
qubely
Published
2022-06-06
Title
Qubely < 1.8.1 - Authenticated Arbitrary Settings Update
Slug
qubely
Published
2023-01-02
Title
Qubely < 1.8.5 - Contributor+ Stored XSS
Slug
qubely
Published
2023-07-17
Title
Qubely < 1.8.6 - Unauthenticated Arbitrary E-mail Sending
Slug
qubely
Published
2025-02-13
Title
Qubely – Advanced Gutenberg Blocks < 1.8.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'align' and 'UniqueID'
Slug
qubely
Published
2025-03-10
Title
Qubely < 1.8.14 - Contributor+ Sensitive Information Exposure
Slug
qubely
Published
2025-09-22
Title
Qubely <= 1.8.14 - Missing Authorization
Slug
qubely
Published
2025-09-22
Title
Qubely <= 1.8.14 - Authenticated (Contributor+) Sensitive Information Exposure
Slug
qubely
Published
2026-02-14
Title
Qubely <= 1.8.14 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
qubely
Published
2026-07-23
Title
Qubely – Advanced Gutenberg Blocks <= 1.8.14 - Missing Authorization
Slug
qubotchat
Published
2023-05-22
Title
qubotchat < 1.1.6 - Unauthenticated Stored XSS
Slug
qubotchat
Published
2023-05-22
Title
Qubotchat < 1.1.6 – Admin+ Stored XSS
Slug
quentn-wp
Published
2025-04-17
Title
Quentn WP < 1.2.9 - Unauthenticated SQL Injection
Slug
quentn-wp
Published
2025-04-17
Title
Quentn WP < 1.2.9 - Unauthenticated Privilege Escalation
Slug
quentn-wp
Published
2026-03-20
Title
Quentn WP < 1.2.13 - Unauthenticated SQL Injection via 'qntn_wp_access' Cookie
Slug
query-monitor
Published
2026-03-30
Title
Query Monitor < 3.20.4 - Reflected Cross-Site Scripting via Request URI
Slug
query-posts
Published
2025-09-28
Title
Query Posts <= 0.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
query-shortcode
Published
2026-05-26
Title
Query Shortcode <= 0.2.1 - Authenticated (Contributor+) Local File Inclusion via 'lens' Shortcode Attribute
Slug
query-wrangler
Published
2023-08-16
Title
Query Wrangler < 1.5.52 - Reflected XSS
Slug
query-wrangler
Published
2025-04-01
Title
Query Wrangler < 1.5.55 - Cross-Site Request Forgery
Slug
query-wrangler
Published
2026-07-22
Title
Query Wrangler < 1.5.58 - Missing Authorization
Slug
query-wrangler
Published
2026-08-15
Title
Query Wrangler < 1.5.58 - Authenticated (Subscriber+) Remote Code Execution via 'options' Parameter
Slug
query-wrangler
Published
2026-08-19
Title
Query Wrangler < 1.5.58 - Authenticated (Subscriber+) Remote Code Execution
Slug
querywall
Published
2023-05-26
Title
QueryWall: Plug'n Play Firewall <= 1.1.1 - Admin+ SQLi