WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
quick-chat
Published
2012-06-18
Title
Quick Chat < 4.00 - SQL Injection
Slug
quick-chat
Published
2020-10-14
Title
Quick Chat <= 4.14 - Authenticated Stored Cross-Site Scripting
Slug
quick-chat
Published
2020-10-14
Title
Quick Chat <= 4.14 - Unauthenticated Stored Cross-Site Scripting
Slug
quick-code
Published
2024-08-22
Title
Quick Code <= 1.0 - Stored XSS via CSRF
Slug
quick-contact-form
Published
2014-08-01
Title
Quick Contact Form 6.2 - Unspecified XSS
Slug
quick-contact-form
Published
2013-10-08
Title
Quick Contact Form 6.0 - Stored XSS
Slug
quick-contact-form
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
quick-contact-form
Published
2023-02-06
Title
Quick Contact Form < 8.0.4 - Contributor+ Stored XSS
Slug
quick-contact-form
Published
2023-02-15
Title
Quick Contact Form < 8.0.4 - Admin+ Stored XSS
Slug
quick-contact-form
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
quick-contact-form
Published
2025-05-29
Title
Quick Contact Form < 8.2.2 - Reflected Cross-Site Scripting
Slug
quick-contact-form
Published
2025-11-25
Title
Quick Contact Form < 8.2.6 - Cross-Site Request Forgery
Slug
quick-count
Published
2025-01-16
Title
Quick Count <= 3.00 - Unauthenticated PHP Object Injection
Slug
quick-edit-template-link
Published
2023-06-16
Title
Template Debugger <= 3.1.2 - Cross-Site Request Forgery
Slug
quick-event-calendar
Published
2025-06-05
Title
Quick Event Calendar <= 1.4.9 - Cross-Site Request Forgery
Slug
quick-event-calendar
Published
2025-09-05
Title
Quick Event Calendar <= 1.4.9 - Cross-Site Request Forgery
Slug
quick-event-manager
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
quick-event-manager
Published
2023-01-12
Title
Quick Event Manager < 9.7.5 - Reflected Cross-Site
Slug
quick-event-manager
Published
2023-01-20
Title
Quick Event Manager < 9.7.5 - Registration Deletion/Update via CSRF
Slug
quick-event-manager
Published
2023-02-14
Title
Quick Event Manager < 9.6.5 - Admin+ Stored XSS
Slug
quick-event-manager
Published
2023-01-20
Title
Quick Event Manager < 9.7.5 - Unauthenticated Stored XSS
Slug
quick-event-manager
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
quick-favicon
Published
2025-06-27
Title
Quick Favicon <= 0.22.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
quick-featured-images
Published
2024-04-22
Title
Quick Featured Images < 13.7.1 - Missing Authorization to Authenticated (Contributor+) Arbitrary Thumbnail Deletion/Setting
Slug
quick-featured-images
Published
2025-10-14
Title
Quick Featured Images < 13.7.3 - Insecure Direct Object Reference to Image Manipulation