WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
qubely
Published
2025-03-10
Title
Qubely < 1.8.14 - Contributor+ Sensitive Information Exposure
Slug
qubely
Published
2025-09-22
Title
Qubely <= 1.8.14 - Missing Authorization
Slug
qubely
Published
2025-09-22
Title
Qubely <= 1.8.14 - Authenticated (Contributor+) Sensitive Information Exposure
Slug
qubotchat
Published
2023-05-22
Title
qubotchat < 1.1.6 - Unauthenticated Stored XSS
Slug
qubotchat
Published
2023-05-22
Title
Qubotchat < 1.1.6 – Admin+ Stored XSS
Slug
quentn-wp
Published
2025-04-17
Title
Quentn WP < 1.2.9 - Unauthenticated SQL Injection
Slug
quentn-wp
Published
2025-04-17
Title
Quentn WP < 1.2.9 - Unauthenticated Privilege Escalation
Slug
query-posts
Published
2025-09-28
Title
Query Posts <= 0.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
query-wrangler
Published
2023-08-16
Title
Query Wrangler < 1.5.52 - Reflected XSS
Slug
query-wrangler
Published
2025-04-01
Title
Query Wrangler < 1.5.55 - Cross-Site Request Forgery
Slug
querywall
Published
2023-05-26
Title
QueryWall: Plug'n Play Firewall <= 1.1.1 - Admin+ SQLi
Slug
question-answer
Published
2025-04-01
Title
Question Answer <= 1.2.70 - Missing Authorization
Slug
question-answer
Published
2025-04-10
Title
Question Answer < 1.2.71 - Reflected Cross-Site Scripting
Slug
question-answer
Published
2025-04-14
Title
Question Answer <= 1.2.70 - Authenticated (Subscriber+) PHP Object Injection
Slug
questionar-elementor
Published
2025-12-31
Title
Questionar for Elementor <= 1.1.7 - Missing Authorization
Slug
questionpro-surveys
Published
2026-02-13
Title
QuestionPro Surveys <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Slug
quform
Published
2024-11-08
Title
Quform - WordPress Form Builder < 2.21.0 - Unauthenticated Sensitive Information Exposure
Slug
quick-adsense
Published
2022-04-02
Title
Quick Adsense < 2.8.2 - Subscriber+ Post Stats Reset
Slug
quick-adsense-reloaded
Published
2024-09-25
Title
Ads by WPQuads – Adsense Ads, Banner Ads, Popup Ads < 2.0.85 - Missing Authorization
Slug
quick-adsense-reloaded
Published
2025-03-27
Title
Ads by WPQuads < 2.0.88 - Unauthenticated SQL Injection
Slug
quick-adsense-reloaded
Published
2025-03-27
Title
Ads by WPQuads < 2.0.88 - Missing Authorization
Slug
quick-adsense-reloaded
Published
2025-09-22
Title
Ads by WPQuads <= 2.0.94 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
quick-affiliate-store
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
quick-audio-player
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
quick-audio-player
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting